Information disclosure vulnerability in Mozilla Firefox

Description

Improper CORS implementation was found in Mozilla Firefox at fetch() API. By exploiting this vulnerability malicious users can obtain sensitive information. This vulnerability can be exploited remotely via a specially designed web page.

Original advisories

• Mozilla advisory

Related products

• Mozilla-Firefox

CVE list

• CVE-2015-7184
  high

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com