Security Advisory

CVE-2005-2455

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2005-08-04 04:00:00
Last updated 2024-08-07 22:30:00
Assigner mitre
State PUBLISHED

Description

Greasemonkey before 0.3.5 allows remote web servers to (1) read arbitrary files via a GET request to a file:// URL in the GM_xmlhttpRequest API function, (2) list installed scripts using GM_scripts, or obtain sensitive information via (3) GM_setValue and GM_getValue.