Mozilla Firefox 33.0 and SeaMonkey before 2.31 include path strings in CSP violation reports, which allows remote attackers to obtain sensitive information via a web site that receives a report after a redirect.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mozilla
Published: 2014-12-11T11:00:00
Updated: 2016-12-20T16:57:01
Reserved: 2014-01-16T00:00:00
Link: CVE-2014-1591
JSON object: View
NVD Information
Status : Modified
Published: 2014-12-11T11:59:05.257
Modified: 2016-12-22T02:59:14.610
Link: CVE-2014-1591
JSON object: View
Redhat Information
No data.
CWE