CVE-2016-5288

Web content could access information in the HTTP cache if e10s is disabled. This can reveal some visited URLs and the contents of those pages. This issue affects Firefox 48 and 49. This vulnerability affects Firefox < 49.0.2.

Score

CVSS 3.0 5.9 Medium

Status

Modified - security@mozilla.org

Published

2018-06-11

Last modified

2024-08-06

Weaknesses

CWE-200

Affected products

• Firefox (Mozilla)

References

• http://www.securityfocus.com/bid/93810
• http://www.securitytracker.com/id/1037077
• https://bugzilla.mozilla.org/show_bug.cgi?id=1310183
• https://www.mozilla.org/security/advisories/mfsa2016-87/