CVE-2014-1591

Currently unrated

Key Information:

Vendor
Mozilla
Status
Firefox
Seamonkey
Vendor
CVE Published:
11 December 2014

Summary

Mozilla Firefox 33.0 and SeaMonkey before 2.31 include path strings in CSP violation reports, which allows remote attackers to obtain sensitive information via a web site that receives a report after a redirect.

References

https://bugzilla.mozilla.org/show_bug.cgi?id=1069762
x_refsource_CONFIRM
http://www.mozilla.org/security/announce/2014/mfsa2014-86...
x_refsource_CONFIRM
https://security.gentoo.org/glsa/201504-01
vendor-advisoryx_refsource_GENTOO

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.