Beveiligingsadvies

CVE-2016-2833

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2016-06-13 10:00:00
Laatst bijgewerkt 2024-08-05 23:32:21
Toegewezen door mozilla
CVSS-score geen score
Status PUBLISHED

Beschrijving

Mozilla Firefox before 47.0 ignores Content Security Policy (CSP) directives for cross-domain Java applets, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted applet.