Security Advisory
CVE-2015-4483
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Mozilla Firefox before 40.0 allows man-in-the-middle attackers to bypass a mixed-content protection mechanism via a feed: URL in a POST request.