VULNERABILITY INTELLIGENCE
CVE-2008-0414
CVSS score4.3 MEDIUM
EPSS probability2.09%
CISA KEVNot currently listed
Published2008-02-08
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:N/I:P/A:N
Description
Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8 allows user-assisted remote attackers to trick the user into uploading arbitrary files via label tags that shift focus to a file input field, aka "focus spoofing."
Weakness classification
- CWE-20: Improper Input Validation