← Database

CVE-2005-0231

LOW CVSS: 2.6 Published: 2005-02-07 Modified: 2026-06-16

Description

Firefox 1.0 does not invoke the Javascript Security Manager when a user drags a javascript: or data: URL to a tab, which allows remote attackers to bypass the security model, aka "firetabbing."

Affected Platforms

Mozilla Firefox

Weakness Type

NVD-CWE-Other

References