Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2017-5408

Опубликовано: 07 мар. 2017
Источник: redhat
CVSS3: 6.1
CVSS2: 4.3
EPSS Низкий

Описание

Video files loaded video captions cross-origin without checking for the presence of CORS headers permitting such cross-origin use, leading to potential information disclosure for video captions. This vulnerability affects Firefox < 52, Firefox ESR < 45.8, Thunderbird < 52, and Thunderbird < 45.8.

Дополнительная информация

Статус:

Moderate
https://bugzilla.redhat.com/show_bug.cgi?id=1429784Mozilla: Cross-origin reading of video captions in violation of CORS (MFSA 2017-06)

EPSS

Процентиль: 77%
0.01068
Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Связанные уязвимости

CVSS3: 5.3
ubuntu
больше 7 лет назад

Video files loaded video captions cross-origin without checking for the presence of CORS headers permitting such cross-origin use, leading to potential information disclosure for video captions. This vulnerability affects Firefox < 52, Firefox ESR < 45.8, Thunderbird < 52, and Thunderbird < 45.8.

CVSS3: 5.3
nvd
больше 7 лет назад

Video files loaded video captions cross-origin without checking for the presence of CORS headers permitting such cross-origin use, leading to potential information disclosure for video captions. This vulnerability affects Firefox < 52, Firefox ESR < 45.8, Thunderbird < 52, and Thunderbird < 45.8.

CVSS3: 5.3
debian
больше 7 лет назад

Video files loaded video captions cross-origin without checking for th ...

CVSS3: 5.3
github
больше 3 лет назад

Video files loaded video captions cross-origin without checking for the presence of CORS headers permitting such cross-origin use, leading to potential information disclosure for video captions. This vulnerability affects Firefox < 52, Firefox ESR < 45.8, Thunderbird < 52, and Thunderbird < 45.8.

oracle-oval
больше 8 лет назад

ELSA-2017-0498: thunderbird security update (IMPORTANT)

EPSS

Процентиль: 77%
0.01068
Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2