medium5.9
CVE-2016-5288
Web content could access information in the HTTP cache if e10s is disabled.
Impact
Web content could access information in the HTTP cache if e10s is disabled. This can reveal some visited URLs and the contents of those pages. This issue affects Firefox 48 and 49. This vulnerability affects Firefox < 49.0.2.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mozilla | Firefox | before 49.0.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/93810
- http://www.securitytracker.com/id/1037077
- https://bugzilla.mozilla.org/show_bug.cgi?id=1310183
- https://www.mozilla.org/security/advisories/mfsa2016-87/
- http://www.securityfocus.com/bid/93810
- http://www.securitytracker.com/id/1037077
- https://bugzilla.mozilla.org/show_bug.cgi?id=1310183
- https://www.mozilla.org/security/advisories/mfsa2016-87/