CVE-2016-2825

Опубликовано: 07 июн. 2016

Источник: redhat

CVSS2: 4.3

Описание

Mozilla Firefox before 47.0 allows remote attackers to bypass the Same Origin Policy and modify the location.host property via an invalid data: URL.

This issue does not affect the version of firefox and thunderbird as shipped with Red Hat Enterprise Linux 5, 6 and 7.

Платформа	Пакет	Состояние
Red Hat Enterprise Linux 5	firefox	Not affected
Red Hat Enterprise Linux 5	thunderbird	Not affected
Red Hat Enterprise Linux 6	firefox	Not affected
Red Hat Enterprise Linux 6	thunderbird	Not affected
Red Hat Enterprise Linux 7	firefox	Not affected
Red Hat Enterprise Linux 7	thunderbird	Not affected

Показывать по

Статус:

Moderate

https://bugzilla.redhat.com/show_bug.cgi?id=1342894Mozilla: Partial same-origin-policy through setting location.host through data: URI (MFSA 2016-54)

4.3 Medium

CVSS2

CVE-2016-2825

CVSS3: 6.5

ubuntu

около 10 лет назад

Mozilla Firefox before 47.0 allows remote attackers to bypass the Same Origin Policy and modify the location.host property via an invalid data: URL.

CVE-2016-2825

CVSS3: 6.5

nvd

около 10 лет назад

Mozilla Firefox before 47.0 allows remote attackers to bypass the Same Origin Policy and modify the location.host property via an invalid data: URL.

CVE-2016-2825

CVSS3: 6.5

debian

около 10 лет назад

Mozilla Firefox before 47.0 allows remote attackers to bypass the Same ...

GHSA-frpp-99pq-vjpv

CVSS3: 6.5

github

больше 4 лет назад

Mozilla Firefox before 47.0 allows remote attackers to bypass the Same Origin Policy and modify the location.host property via an invalid data: URL.

BDU:2016-01553

fstec

около 10 лет назад

Уязвимость браузера Firefox, позволяющая нарушителю обойти существующую политику ограничения доступа и изменить свойство location.host

4.3 Medium

CVSS2