Mozilla Firefox before 44.0 on Android allows remote attackers to spoof the address bar via the scrollTo method.
| Software | From | Fixed in |
|---|---|---|
| opensuse / leap | 42.1 | 42.1.x |
| opensuse / opensuse | 13.1 | 13.1.x |
| opensuse / opensuse | 13.2 | 13.2.x |
| mozilla / firefox | 43.0.4 | 43.0.4.x |
| google / android | - | - |