CVE-2016-2825

Mozilla Firefox before 47.0 allows remote attackers to bypass the Same Origin Policy and modify the location.host property via an invalid data: URL

published June 13, 2016

CVSS
—
EPSS
2%
Percentile
76.9
In the wild
Unconfirmed
What it is

Mozilla Firefox before 47.0 allows remote attackers to bypass the Same Origin Policy and modify the location.host property via an invalid data: URL.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01699 · 76.9th percentile
Published
2016-06-13T10:00Z
EPSS history
Timeline
  • 13 JUN 10:00Z
    Mozilla Firefox before 47.0 allows remote attackers to bypass the Same Origin Policy and modify the location.host property via an invalid data: URL
    cvelistv5