CVE-2016-5288

medium

Description

Web content could access information in the HTTP cache if e10s is disabled. This can reveal some visited URLs and the contents of those pages. This issue affects Firefox 48 and 49. This vulnerability affects Firefox < 49.0.2.

References

https://www.mozilla.org/security/advisories/mfsa2016-87/

https://bugzilla.mozilla.org/show_bug.cgi?id=1310183

http://www.securitytracker.com/id/1037077

http://www.securityfocus.com/bid/93810

Details

Source: Mitre, NVD

Published: 2018-06-11

Updated: 2018-07-30

Risk Information

CVSS v2

Base Score: 4.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:N/A:N

Severity: Medium

CVSS v3

Base Score: 5.9

Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N