QwikSec

Security Database

CVE

CWE

Training

CVE-2016-9078

Published: Jun 11, 2018

Modified: Aug 6, 2024

PUBLISHED

Description

Redirection from an HTTP connection to a "data:" URL assigns the referring site's origin to the "data:" URL in some circumstances. This can result in same-origin violations against a domain if it loads resources from malicious sites. Cross-origin setting of cookies has been demonstrated without the ability to read them. Note: This issue only affects Firefox 49 and 50. This vulnerability affects Firefox < 50.0.1.

Vendor	Product	Versions
Mozilla	Firefox	affected `unspecified - < 50.0.1`

References

vdb-entry

x_refsource_BID

https://www.mozilla.org/security/advisories/mfsa2016-91/

x_refsource_CONFIRM

vdb-entry

x_refsource_SECTRACK

https://bugzilla.mozilla.org/show_bug.cgi?id=1317641

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.