CVE-2014-1591 in Mozilla Firefox
요약 (영어)
Mozilla Firefox 33.0 and SeaMonkey before 2.31 include path strings in CSP violation reports, which allows remote attackers to obtain sensitive information via a web site that receives a report after a redirect.
예약하다
2014. 01. 16.
공개
2014. 12. 11.
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 68310 | Mozilla Firefox Content Security Policy 정보 공개 | 199 | 입증되지 않음 | 공식 수정 | CVE-2014-1591 |