Cross-site request forgery (CSRF) vulnerability in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2.0.12, allows remote attackers to hijack the authentication of arbitrary users for requests that were initiated by a plugin and received a 307 redirect to a page on a different web site.
History

No history.

cve-icon MITRE Information

Status: PUBLISHED

Assigner: mitre

Published: 2011-03-02T19:00:00

Updated: 2017-09-18T12:57:01

Reserved: 2010-12-21T00:00:00


Link: CVE-2011-0059

JSON object: View

cve-icon NVD Information

Status : Modified

Published: 2011-03-02T20:00:01.597

Modified: 2017-09-19T01:31:51.973


Link: CVE-2011-0059

JSON object: View

cve-icon Redhat Information

No data.

CWE