CVE-2014-1583

The Alarm API in Mozilla Firefox before 33.0 and Firefox ESR 31.x before 31.2 does not properly restrict toJSON calls, which allows remote attackers to bypass…

published October 15, 2014

CVSS
—
EPSS
3%
Percentile
86.6
In the wild
Unconfirmed
What it is

The Alarm API in Mozilla Firefox before 33.0 and Firefox ESR 31.x before 31.2 does not properly restrict toJSON calls, which allows remote attackers to bypass the Same Origin Policy via crafted API calls that access sensitive information within the JSON data of an alarm.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02864 · 86.6th percentile
Published
2014-10-15T10:00Z
EPSS history
Timeline
  • 15 OCT 10:00Z
    The Alarm API in Mozilla Firefox before 33.0 and Firefox ESR 31.x before 31.2 does not properly restrict toJSON calls, which allows remote attackers to bypass…
    cvelistv5