CVE-2017-5382 — Sensitive Information Exposure in Mozilla Firefox

CWE-200 — Sensitive Information Exposure8 documents5 sources
Severity
7.5HIGHNVD
OSV9.8
EPSS
1.0%
top 23.52%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Mozilla FirefoxDebian FirefoxDebian Firefox-esr
Timeline
PublishedJun 11
Latest updateMay 14

Description

Feed preview for RSS feeds can be used to capture errors and exceptions generated by privileged content, allowing for the exposure of internal information not meant to be seen by web content. This vulnerability affects Firefox < 51.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages5 packages

▶debiandebian/firefox< firefox 51.0-1 (sid)
▶CVEListV5mozilla/firefoxunspecified — 51
▶NVDmozilla/firefox< 51.0
▶debiandebian/firefox-esr< firefox 51.0-1 (sid)
▶Ubuntumozilla/firefox< 51.0.1+build2-0ubuntu0.14.04.1+3

Patches

Patch: bugzilla.mozilla.org ↗Patch: bugzilla.mozilla.org ↗

🔴Vulnerability Details

4
GHSA
GHSA-r745-vx44-pc94: Feed preview for RSS feeds can be used to capture errors and exceptions generated by privileged content, allowing for the exposure of internal informa↗2022-05-14
▶
OSV
firefox regression↗2017-02-06
▶
OSV
firefox vulnerabilities↗2017-01-27
▶
OSV
CVE-2017-5382: Feed preview for RSS feeds can be used to capture errors and exceptions generated by privileged content, allowing for the exposure of internal informa↗2017-01-25
▶

📋Vendor Advisories

3
Ubuntu
Firefox regression↗2017-02-06
▶
Ubuntu
Firefox vulnerabilities↗2017-01-27
▶
Debian
CVE-2017-5382: firefox - Feed preview for RSS feeds can be used to capture errors and exceptions generate...↗2017
▶