CVE-2016-2833

2016-06-13T06:59:14
ID CVE-2016-2833
Type cve
Reporter NVD
Modified 2018-10-30T12:27:35

Description

Mozilla Firefox before 47.0 ignores Content Security Policy (CSP) directives for cross-domain Java applets, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted applet.