CVE-2016-9078

🗓️ 11 Jun 2018 21:00:00Reported by mozillaType

Redirection from HTTP to "data:" URL in Firefox < 50.0.

Reporter	Title	Published	Views	Family All 37
Tenable Nessus	Mozilla Firefox < 50.0.1 Authentication Bypass	5 Jan 201700:00	–	nessus
Tenable Nessus	FreeBSD : mozilla -- data: URL can inherit wrong origin after an HTTP redirect (f90fce70-ecfa-4f4d-9ee8-c476dbf4bf0e)	29 Nov 201600:00	–	nessus
Tenable Nessus	Mozilla Firefox 49.x < 50.0.1 HTTP Redirect Handling Same-origin Policy Bypass	1 Dec 201600:00	–	nessus
Tenable Nessus	Mozilla Firefox 49.x < 50.0.1 HTTP Redirect Handling Same-origin Policy Bypass	1 Dec 201600:00	–	nessus
Tenable Nessus	openSUSE Security Update : MozillaFirefox (openSUSE-2016-1392)	6 Dec 201600:00	–	nessus
Tenable Nessus	openSUSE Security Update : Mozilla Firefox / Thunderbird and NSS (openSUSE-2016-1407)	7 Dec 201600:00	–	nessus
Tenable Nessus	Ubuntu 14.04 LTS / 16.04 LTS : Firefox vulnerabilities (USN-3140-1)	1 Dec 201600:00	–	nessus
ArchLinux	[ASA-201612-1] firefox: multiple issues	1 Dec 201600:00	–	archlinux
CNVD	Mozilla Firefox URL Redirection Vulnerability	2 Dec 201600:00	–	cnvd
Check Point Advisories	Firefox SVG Cross-Domain Cookie Setting (CVE-2016-9078)	17 Aug 201700:00	–	checkpoint_advisories

NVD

Vulners

Node

mozilla firefoxMatch49.0

mozilla firefoxMatch50.0

[
  {
    "product": "Firefox",
    "vendor": "Mozilla",
    "versions": [
      {
        "lessThan": "50.0.1",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
securitytracker	www.securitytracker.com/id/1037353
mozilla	www.mozilla.org/security/advisories/mfsa2016-91/
bugzilla	www.bugzilla.mozilla.org/show_bug.cgi
securityfocus	www.securityfocus.com/bid/94569

21 Nov 2024 03:00Current

7.8High risk

Vulners AI Score7.8

CVSS 26.8

CVSS 38.8

EPSS0.01176

CWE-601