VULNERABILITY INTELLIGENCE
CVE-2015-5961
CVSS score3.3 LOW
EPSS probability0.38%
CISA KEVNot currently listed
Published2015-08-08
Last modified2026-06-17
CVSS vectorAV:A/AC:L/Au:N/C:N/I:P/A:N
Description
The COPPA error page in the Accounts setup dialog in Mozilla Firefox OS before 2.2 embeds content from an external web server URL into the System process, which allows man-in-the-middle attackers to bypass intended access restrictions by spoofing that server.