medium4.3
CVE-2014-1591
Mozilla Firefox 33.0 and SeaMonkey before 2.31 include path strings in CSP violation reports, which allows remote attackers to obtain sensitive information via…
Impact
Mozilla Firefox 33.0 and SeaMonkey before 2.31 include path strings in CSP violation reports, which allows remote attackers to obtain sensitive information via a web site that receives a report after a redirect.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mozilla | Firefox | Version 33.0 |
| Mozilla | Seamonkey | through 2.30 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.mozilla.org/security/announce/2014/mfsa2014-86.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- https://bugzilla.mozilla.org/show_bug.cgi?id=1069762
- https://security.gentoo.org/glsa/201504-01
- http://www.mozilla.org/security/announce/2014/mfsa2014-86.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- https://bugzilla.mozilla.org/show_bug.cgi?id=1069762
- https://security.gentoo.org/glsa/201504-01