CVE-2015-7197

Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 improperly control the ability of a web worker to create a WebSocket object, which allows remote…

published November 5, 2015

CVSS
—
EPSS
3%
Percentile
84.7
In the wild
Unconfirmed
What it is

Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 improperly control the ability of a web worker to create a WebSocket object, which allows remote attackers to bypass intended mixed-content restrictions via crafted JavaScript code.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02535 · 84.7th percentile
Published
2015-11-05T02:00Z
EPSS history
Timeline
  • 05 NOV 02:00Z
    Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 improperly control the ability of a web worker to create a WebSocket object, which allows remote…
    cvelistv5