ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2016-1955

—
CVSS 3.0
4.3 medium
EPSS
2%p80
Published
()
Modified
Description

Mozilla Firefox before 45.0 allows remote attackers to bypass the Same Origin Policy and obtain sensitive information by reading a Content Security Policy (CSP) violation report that contains path information associated with an IFRAME element.

Vendors
novellopensusemozilla
Products
suse package hub for suse linux enterprise, leap, opensuse, firefox
Weakness
CWE-200
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
NVD CVE.org GitHub PoCs EPSS (2.0%)

In the news

No ingested article mentions this CVE yet.