CVE-2014-1591 in Mozilla Firefox
Resumen (Inglés)
Mozilla Firefox 33.0 and SeaMonkey before 2.31 include path strings in CSP violation reports, which allows remote attackers to obtain sensitive information via a web site that receives a report after a redirect.
Reservar
2014-01-16
Divulgación
2014-12-11
Voces
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerabilidad | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 68310 | Mozilla Firefox Content Security Policy divulgación de información | 199 | No probado | Arreglo oficial | CVE-2014-1591 |