CVE-2017-5408

Video files loaded video captions cross-origin without checking for the presence of CORS headers permitting such cross-origin use, leading to potential…

published June 11, 2018

CVSS
—
EPSS
3%
Percentile
84.8
In the wild
Unconfirmed
What it is

Video files loaded video captions cross-origin without checking for the presence of CORS headers permitting such cross-origin use, leading to potential information disclosure for video captions. This vulnerability affects Firefox < 52, Firefox ESR < 45.8, Thunderbird < 52, and Thunderbird < 45.8.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02545 · 84.8th percentile
Published
2018-06-11T21:00Z
EPSS history
Timeline
  • 11 JUN 21:00Z
    Video files loaded video captions cross-origin without checking for the presence of CORS headers permitting such cross-origin use, leading to potential…
    cvelistv5