CVE-2014-1591

Published: 2 December 2014

Mozilla Firefox 33.0 and SeaMonkey before 2.31 include path strings in CSP violation reports, which allows remote attackers to obtain sensitive information via a web site that receives a report after a redirect.

Status

References

• https://www.mozilla.org/en-GB/security/advisories/mfsa2014-86/
• https://ubuntu.com/security/notices/USN-2424-1
• https://www.cve.org/CVERecord?id=CVE-2014-1591
• NVD
• Launchpad
• Debian