VULNERABILITY INTELLIGENCE

CVE-2014-1552

CVSS score5.8 MEDIUM
EPSS probability1.26%
CISA KEVNot currently listed
Published2014-07-23
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:N

Description

Mozilla Firefox before 31.0 and Thunderbird before 31.0 do not properly implement the sandbox attribute of the IFRAME element, which allows remote attackers to bypass intended restrictions on same-origin content via a crafted web site in conjunction with a redirect.

Primary references