Red Hat Bugzilla – Bug 1265624
CVE-2015-4508 Mozilla: URL spoofing in reader mode (MFSA 2015-103)
Last modified: 2015-09-24 13:47:00 EDT
Security researcher Juho Nurminen reported a mechanism to spoof the
URL displayed in the addressbar in reader mode by manipulating the loaded
URL. This flaw allows for the URL displayed to be different than that the web
content rendered. This allows for potential spoofing but the effects are
mitigated due to the restrictions reader mode places when rendering content.
Red Hat would like to thank the Mozilla project for reporting this issue. Upstream acknowledges Juho Nurminen as the original reporter.
This issue was fixed in Firefox version 41.