CVE-2015-4483
published 2015-08-16CVE-2015-4483: Mozilla Firefox before 40.0 allows man-in-the-middle attackers to bypass a mixed-content protection mechanism via a feed: URL in a POST request.
PriorityP421medium4.3CVSS 2.0
AVNACMAuNCNIPAN
EPSS
1.51%
71.4th percentile
Mozilla Firefox before 40.0 allows man-in-the-middle attackers to bypass a mixed-content protection mechanism via a feed: URL in a POST request.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| mozilla | firefox | <= 39.0.3 | — |
| mozilla | firefox | >= 0 < 40.0+build4-0ubuntu0.14.04.4 | 40.0+build4-0ubuntu0.14.04.4 |
| opensuse | opensuse | — | — |
| opensuse | opensuse | — | — |
| oracle | solaris | — | — |
CVSS provenance
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
osv4.3MEDIUM
vendor_redhat4.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-9xhj-7vhh-97qx: Mozilla Firefox before 40
ghsa_unreviewed·2022-05-14
CVE-2015-4483 [MEDIUM] GHSA-9xhj-7vhh-97qx: Mozilla Firefox before 40
Mozilla Firefox before 40.0 allows man-in-the-middle attackers to bypass a mixed-content protection mechanism via a feed: URL in a POST request.
OSV
CVE-2015-4483: Mozilla Firefox before 40
osv·2015-08-16·CVSS 4.3
CVE-2015-4483 [MEDIUM] CVE-2015-4483: Mozilla Firefox before 40
Mozilla Firefox before 40.0 allows man-in-the-middle attackers to bypass a mixed-content protection mechanism via a feed: URL in a POST request.
Red Hat
Mozilla: Feed: protocol with POST bypasses mixed content protections (MFSA 2015-86)
vendor_redhat·2015-08-11·CVSS 4.3
CVE-2015-4483 [MEDIUM] Mozilla: Feed: protocol with POST bypasses mixed content protections (MFSA 2015-86)
Mozilla: Feed: protocol with POST bypasses mixed content protections (MFSA 2015-86)
Mozilla Firefox before 40.0 allows man-in-the-middle attackers to bypass a mixed-content protection mechanism via a feed: URL in a POST request.
Statement: This issue does not affect the version of firefox and thunderbird as shipped with Red Hat Enterprise Linux 5, 6 and 7.
Package: firefox (Red Hat Enterprise Linux 5) - Not affected
Package: thunderbird (Red Hat Enterprise Linux 5) - Not affected
Package: firefox (Red Hat Enterprise Linux 6) - Not affected
Package: thunderbird (Red Hat Enterprise Linux 6) - Not affected
Package: firefox (Red Hat Enterprise Linux 7) - Not affected
Package: thunderbird (Red Hat Enterprise Linux 7) - Not affected
No detection rules found.
No public exploits indexed.
http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.htmlhttp://www.mozilla.org/security/announce/2015/mfsa2015-86.htmlhttp://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.htmlhttp://www.securityfocus.com/bid/76510http://www.securitytracker.com/id/1033247https://bugzilla.mozilla.org/show_bug.cgi?id=1148732https://security.gentoo.org/glsa/201605-06http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.htmlhttp://www.mozilla.org/security/announce/2015/mfsa2015-86.htmlhttp://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.htmlhttp://www.securityfocus.com/bid/76510http://www.securitytracker.com/id/1033247https://bugzilla.mozilla.org/show_bug.cgi?id=1148732https://security.gentoo.org/glsa/201605-06
2015-08-16
Published