← Database

CVE-2002-2314

MEDIUM CVSS: 5.0 Published: 2002-12-31 Modified: 2026-06-16

Description

Mozilla 1.0 allows remote attackers to steal cookies from other domains via a javascript: URL with a leading "//" and ending in a newline, which causes the host/path check to fail.

Affected Platforms

Mozilla Mozilla

Weakness Type

CWE-20

References