CVE-2016-5288

—

CVSS 3.0

5.9 medium

EPSS

2%p77

Published

Jun 11, 2018 (Jun 11, 2018)

Modified

Jun 17, 2026

Description

Web content could access information in the HTTP cache if e10s is disabled. This can reveal some visited URLs and the contents of those pages. This issue affects Firefox 48 and 49. This vulnerability affects Firefox < 49.0.2.

Vendors: mozilla
Products: firefox
Weakness: CWE-200
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.8%)

In the news0 stories

No ingested article mentions this CVE yet.