NetSight
IP …
medium5.0

CVE-2015-7214

Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 allow remote attackers to bypass the Same Origin Policy via data: and view-source: URIs.

Impact

Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 allow remote attackers to bypass the Same Origin Policy via data: and view-source: URIs.

Affected products

VendorProductAffected versions
OpensuseLeap
Version 42.1
OpensuseOpensuse
Versions 13.1, 13.2
MozillaFirefox
Versions 38.0, 38.0.1, 38.0.5, 38.1.0, 38.1.1, 38.2.0
FedoraprojectFedora
Versions 22, 23

Weakness classification

CWE-200

References