{
  "cveId": "CVE-2017-7839",
  "url": "https://patchblox.com/security/cve/CVE-2017-7839",
  "summary": "CVE-2017-7839 is fixed in 4 products on 1 platform, first by firefox 57.0.1\u002Bbuild2-0ubuntu1, released June 11, 2018. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "firefox: Control characters prepended before \u0022javascript:\u0022 URLs pasted in the addressbar can cause the leading characters to b...",
  "description": "Control characters prepended before \u0022javascript:\u0022 URLs pasted in the addressbar can cause the leading characters to be ignored and the pasted JavaScript to be executed instead of being blocked. This could be used in social engineering and self-cross-site-scripting (self-XSS) attacks where users are convinced to copy and paste text into the addressbar. This vulnerability affects Firefox \u0026lt; 57.",
  "published": "2017-11-14T16:00:00Z",
  "severity": "Low",
  "epss": 0.0112,
  "epssPercentile": 0.66323,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "firefox",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "57.0.1\u002Bbuild2-0ubuntu1",
      "fix": "firefox 57.0.1\u002Bbuild2-0ubuntu1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-firefox-57.0.1-build2-0ubuntu1",
      "released": "2018-06-11T14:29:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox-globalmenu",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "57.0.1\u002Bbuild2-0ubuntu1",
      "fix": "firefox-globalmenu 57.0.1\u002Bbuild2-0ubuntu1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-firefox-globalmenu-57.0.1-build2-0ubuntu1",
      "released": "2018-06-11T14:29:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox-mozsymbols",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "57.0.1\u002Bbuild2-0ubuntu1",
      "fix": "firefox-mozsymbols 57.0.1\u002Bbuild2-0ubuntu1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-firefox-mozsymbols-57.0.1-build2-0ubuntu1",
      "released": "2018-06-11T14:29:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox-testsuite",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "57.0.1\u002Bbuild2-0ubuntu1",
      "fix": "firefox-testsuite 57.0.1\u002Bbuild2-0ubuntu1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-firefox-testsuite-57.0.1-build2-0ubuntu1",
      "released": "2018-06-11T14:29:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-07T12:40:37Z"
}