CVE-2016-5260

Mozilla Firefox before 48.0 mishandles changes from 'INPUT type="password"' to 'INPUT type="text"' within a single Session Manager session, which might allow…

published August 5, 2016

CVSS
—
EPSS
1%
Percentile
71.7
In the wild
Unconfirmed
What it is

Mozilla Firefox before 48.0 mishandles changes from 'INPUT type="password"' to 'INPUT type="text"' within a single Session Manager session, which might allow attackers to discover cleartext passwords by reading a session restoration file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01379 · 71.7th percentile
Published
2016-08-05T01:00Z
EPSS history
Timeline
  • 05 AUG 01:00Z
    Mozilla Firefox before 48.0 mishandles changes from 'INPUT type="password"' to 'INPUT type="text"' within a single Session Manager session, which might allow…
    cvelistv5