AUGUST 4, 2026
Live Feed
Return to register
Case File

CVE-2017-5383

MEDIUM · CVSS 5.3 EPSS 2.46%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2018-06-11 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE
CVE-2017-5383
Severity
MEDIUM
CVSS
5.3
EPSS
2.46%
Firefox

Original Filing — NVD Description

URLs containing certain unicode glyphs for alternative hyphens and quotes do not properly trigger punycode display, allowing for domain name spoofing attacks in the location bar. This vulnerability affects Thunderbird < 45.7, Firefox ESR < 45.7, and Firefox < 51.