CVE-2016-9078
CVE-2016-9078
Vexday Risk Score
3Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS —EPSS 1.9%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
11 jun 2018Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
Redirection from an HTTP connection to a "data:" URL assigns the referring site's origin to the "data:" URL in some circumstances. This can result in same-origin violations against a domain if it loads resources from malicious sites. Cross-origin setting of cookies has been demonstrated without the ability to read them. Note: This issue only affects Firefox 49 and 50. This vulnerability affects Firefox < 50.0.1.
Productos afectados
Mozilla · Firefox¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →