Feed preview for RSS feeds can be used to capture errors and exceptions generated by privileged content, allowing for the exposure of internal information not meant to be seen by web content. This vulnerability affects Firefox < 51.
References
Link | Resource |
---|---|
https://www.mozilla.org/security/advisories/mfsa2017-01/ | Vendor Advisory |
https://bugzilla.mozilla.org/show_bug.cgi?id=1295322 | Issue Tracking Patch |
http://www.securitytracker.com/id/1037693 | Third Party Advisory VDB Entry |
http://www.securityfocus.com/bid/95763 | Third Party Advisory VDB Entry |
Configurations
Information
Published : 2018-06-11 14:29
Updated : 2018-08-07 08:03
NVD link : CVE-2017-5382
Mitre link : CVE-2017-5382
JSON object : View
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
Products Affected
mozilla
- firefox