CVE-2016-5282

Mozilla Firefox before 49.0 does not properly restrict the scheme in favicon requests, which might allow remote attackers to obtain sensitive information via…

published September 22, 2016

CVSS
—
EPSS
2%
Percentile
75.6
In the wild
Unconfirmed
What it is

Mozilla Firefox before 49.0 does not properly restrict the scheme in favicon requests, which might allow remote attackers to obtain sensitive information via unspecified vectors, as demonstrated by a jar: URL for a favicon resource.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01613 · 75.6th percentile
Published
2016-09-22T22:00Z
EPSS history
Timeline
  • 22 SEP 22:00Z
    Mozilla Firefox before 49.0 does not properly restrict the scheme in favicon requests, which might allow remote attackers to obtain sensitive information via…
    cvelistv5