VULNERABILITY INTELLIGENCE
CVE-2009-3370
CVSS score5 MEDIUM
EPSS probability1.98%
CISA KEVNot currently listed
Published2009-10-29
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:N/A:N
Description
Mozilla Firefox before 3.0.15, and 3.5.x before 3.5.4, allows remote attackers to read form history by forging mouse and keyboard events that leverage the auto-fill feature to populate form fields, in an attacker-readable form, with history entries.