CVE-2015-4518

The Reader View implementation in Mozilla Firefox before 42.0 has an improper whitelist, which makes it easier for remote attackers to bypass the Content…

published November 5, 2015

CVSS
—
EPSS
2%
Percentile
80.2
In the wild
Unconfirmed
What it is

The Reader View implementation in Mozilla Firefox before 42.0 has an improper whitelist, which makes it easier for remote attackers to bypass the Content Security Policy (CSP) protection mechanism and conduct cross-site scripting (XSS) attacks via vectors involving SVG animations and the about:reader URL.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01968 · 80.2th percentile
Published
2015-11-05T02:00Z
EPSS history
Timeline
  • 05 NOV 02:00Z
    The Reader View implementation in Mozilla Firefox before 42.0 has an improper whitelist, which makes it easier for remote attackers to bypass the Content…
    cvelistv5