CVE-2014-1591 in Mozilla Firefox
Résumé (Anglaise)
Mozilla Firefox 33.0 and SeaMonkey before 2.31 include path strings in CSP violation reports, which allows remote attackers to obtain sensitive information via a web site that receives a report after a redirect.
Réserver
16/01/2014
Divulgation
11/12/2014
Entrées
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnérabilité | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 68310 | Mozilla Firefox Content Security Policy divulgation d'information | 199 | Non prouvée | Correctif officiel | CVE-2014-1591 |