CVE-2005-2455

Greasemonkey before 0.3.5 allows remote web servers to (1) read arbitrary files via a GET request to a file:// URL in the GM_xmlhttpRequest API function, (2)…

published August 4, 2005

CVSS
—
EPSS
9%
Percentile
95.0
In the wild
Unconfirmed
What it is

Greasemonkey before 0.3.5 allows remote web servers to (1) read arbitrary files via a GET request to a file:// URL in the GM_xmlhttpRequest API function, (2) list installed scripts using GM_scripts, or obtain sensitive information via (3) GM_setValue and GM_getValue.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.08538 · 95.0th percentile
Published
2005-08-04T04:00Z
EPSS history
Timeline
  • 04 AUG 04:00Z
    Greasemonkey before 0.3.5 allows remote web servers to (1) read arbitrary files via a GET request to a file:// URL in the GM_xmlhttpRequest API function, (2)…
    cvelistv5