CVE-2012-4205 (retired)

Priority
Description
Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before
2.14 assign the system principal, rather than the sandbox principal, to
XMLHttpRequest objects created in sandboxes, which allows remote attackers
to conduct cross-site request forgery (CSRF) attacks or obtain sensitive
information by leveraging a sandboxed add-on.
Notes
 jdstrand> xulrunner-1.9.2 unmaintained upstream (see README.mozilla for
  details)
Package
Upstream:needs-triage
Package
Upstream:needs-triage
Package
Upstream:needs-triage
Package
Upstream:needs-triage
Package
Upstream:needs-triage
More Information

Updated: 2019-09-19 15:41:43 UTC (commit d32ebc32606b9517c6fa7d65a15441e2a57a6de5)