CVE-2016-2833

2016-06-13T10:59:00
ID CVE-2016-2833
Type cve
Reporter cve@mitre.org
Modified 2018-10-30T16:27:00

Description

Mozilla Firefox before 47.0 ignores Content Security Policy (CSP) directives for cross-domain Java applets, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted applet.