Поиск уязвимостей
Количество 7
Количество 7
GHSA-xj5m-432r-gpqm
The fetch API implementation in Mozilla Firefox before 41.0.2 does not restrict access to the HTTP response body in certain situations where user credentials are supplied but the CORS cross-origin request algorithm is improperly followed, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.
CVE-2015-7184
The fetch API implementation in Mozilla Firefox before 41.0.2 does not restrict access to the HTTP response body in certain situations where user credentials are supplied but the CORS cross-origin request algorithm is improperly followed, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.
CVE-2015-7184
The fetch API implementation in Mozilla Firefox before 41.0.2 does not restrict access to the HTTP response body in certain situations where user credentials are supplied but the CORS cross-origin request algorithm is improperly followed, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.
CVE-2015-7184
The fetch API implementation in Mozilla Firefox before 41.0.2 does not restrict access to the HTTP response body in certain situations where user credentials are supplied but the CORS cross-origin request algorithm is improperly followed, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.
CVE-2015-7184
The fetch API implementation in Mozilla Firefox before 41.0.2 does not ...
ALT-PU-2015-1897
ALT-PU-2015-1897: package `firefox` update to version 41.0.2-alt1
ALT-PU-2016-1454
ALT-PU-2016-1454: package `firefox-esr` update to version 45.1.1-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-xj5m-432r-gpqm The fetch API implementation in Mozilla Firefox before 41.0.2 does not restrict access to the HTTP response body in certain situations where user credentials are supplied but the CORS cross-origin request algorithm is improperly followed, which allows remote attackers to bypass the Same Origin Policy via a crafted web site. | 2% Низкий | больше 4 лет назад | |
 | CVE-2015-7184 The fetch API implementation in Mozilla Firefox before 41.0.2 does not restrict access to the HTTP response body in certain situations where user credentials are supplied but the CORS cross-origin request algorithm is improperly followed, which allows remote attackers to bypass the Same Origin Policy via a crafted web site. | CVSS2: 6.8 | 2% Низкий | около 11 лет назад |
 | CVE-2015-7184 The fetch API implementation in Mozilla Firefox before 41.0.2 does not restrict access to the HTTP response body in certain situations where user credentials are supplied but the CORS cross-origin request algorithm is improperly followed, which allows remote attackers to bypass the Same Origin Policy via a crafted web site. | CVSS2: 4.3 | 2% Низкий | около 11 лет назад |
 | CVE-2015-7184 The fetch API implementation in Mozilla Firefox before 41.0.2 does not restrict access to the HTTP response body in certain situations where user credentials are supplied but the CORS cross-origin request algorithm is improperly followed, which allows remote attackers to bypass the Same Origin Policy via a crafted web site. | CVSS2: 6.8 | 2% Низкий | около 11 лет назад |
| CVE-2015-7184 The fetch API implementation in Mozilla Firefox before 41.0.2 does not ... | CVSS2: 6.8 | 2% Низкий | около 11 лет назад |
| ALT-PU-2015-1897 ALT-PU-2015-1897: package `firefox` update to version 41.0.2-alt1 | CVSS2: 6.8 | 2% Низкий | около 11 лет назад |
| ALT-PU-2016-1454 ALT-PU-2016-1454: package `firefox-esr` update to version 45.1.1-alt1 | CVSS3: 10 | больше 10 лет назад |
Уязвимостей на страницу