{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/3024?format=json","vulnerability_id":"VCID-c3dt-fgub-cbb5","summary":"Mozilla developer Matthew Noorenberghe reported that\nwhitelisted Mozilla domains could make UITour API calls while the\nUI Tour pages for Firefox are present in background tabs. If one of these\nMozilla domains was compromised and open in another tab, an attacker could then\nuse that tab to engage in spoofing and clickjacking in any foreground tab.","aliases":[{"alias":"CVE-2015-0819"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/1219?format=json","purl":"pkg:mozilla/Firefox@36.0.0","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:mozilla/Firefox@36.0.0"}],"affected_packages":[],"references":[{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0819","reference_id":"CVE-2015-0819","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0819"},{"reference_url":"https://www.mozilla.org/en-US/security/advisories/mfsa2015-26","reference_id":"mfsa2015-26","reference_type":"","scores":[{"value":"none","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2015-26"}],"weaknesses":[],"exploits":[],"severity_range_score":null,"exploitability":null,"weighted_severity":null,"risk_score":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-c3dt-fgub-cbb5"}