Security Advisory

CVE-2014-1591

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2014-12-11 11:00:00

Last updated 2024-08-06 09:42:36

Assigner mozilla

CVSS score not scored

State PUBLISHED

Description

Mozilla Firefox 33.0 and SeaMonkey before 2.31 include path strings in CSP violation reports, which allows remote attackers to obtain sensitive information via a web site that receives a report after a redirect.

← Browse all CVEs View on cve.org ↗