Lucene search

K
cvelistMozillaCVELIST:CVE-2015-7215
HistoryDec 16, 2015 - 11:00 a.m.

CVE-2015-7215

2015-12-1611:00:00
mozilla
raw.githubusercontent.com
2

6.1 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

73.6%

The importScripts function in the Web Workers API implementation in Mozilla Firefox before 43.0 allows remote attackers to bypass the Same Origin Policy by triggering use of the no-cors mode in the fetch API to attempt resource access that throws an exception, leading to information disclosure after a rethrow.

6.1 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

73.6%