Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2017-5408

Опубликовано: 07 мар. 2017
Источник: redhat
CVSS3: 6.1
CVSS2: 4.3
EPSS Низкий

Описание

Video files loaded video captions cross-origin without checking for the presence of CORS headers permitting such cross-origin use, leading to potential information disclosure for video captions. This vulnerability affects Firefox < 52, Firefox ESR < 45.8, Thunderbird < 52, and Thunderbird < 45.8.

Дополнительная информация

Статус:

Moderate
https://bugzilla.redhat.com/show_bug.cgi?id=1429784Mozilla: Cross-origin reading of video captions in violation of CORS (MFSA 2017-06)

EPSS

Процентиль: 84%
0.02631
Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Связанные уязвимости

CVSS3: 5.3
ubuntu
около 8 лет назад

Video files loaded video captions cross-origin without checking for the presence of CORS headers permitting such cross-origin use, leading to potential information disclosure for video captions. This vulnerability affects Firefox < 52, Firefox ESR < 45.8, Thunderbird < 52, and Thunderbird < 45.8.

CVSS3: 5.3
nvd
около 8 лет назад

Video files loaded video captions cross-origin without checking for the presence of CORS headers permitting such cross-origin use, leading to potential information disclosure for video captions. This vulnerability affects Firefox < 52, Firefox ESR < 45.8, Thunderbird < 52, and Thunderbird < 45.8.

CVSS3: 5.3
debian
около 8 лет назад

Video files loaded video captions cross-origin without checking for th ...

CVSS3: 5.3
github
около 4 лет назад

Video files loaded video captions cross-origin without checking for the presence of CORS headers permitting such cross-origin use, leading to potential information disclosure for video captions. This vulnerability affects Firefox < 52, Firefox ESR < 45.8, Thunderbird < 52, and Thunderbird < 45.8.

oracle-oval
больше 9 лет назад

ELSA-2017-0498: thunderbird security update (IMPORTANT)

EPSS

Процентиль: 84%
0.02631
Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2