Lucene search

K
mozillaMozilla FoundationMFSA2009-21
HistoryApr 21, 2009 - 12:00 a.m.

POST data sent to wrong site when saving web page with embedded frame — Mozilla

2009-04-2100:00:00
Mozilla Foundation
www.mozilla.org
12

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.004 Low

EPSS

Percentile

73.4%

Developer and Mozilla community member Paolo Amadini reported that when saving the inner frame of a web page as a file when the outer page has POST data associated with it, the POST data will be incorrectly sent to the URL of the inner frame. This could potentially result in a user’s sensitive data being sent to a site for which it was not intended.

CPENameOperatorVersion
firefoxlt3.0.9
seamonkeylt1.1.17

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.004 Low

EPSS

Percentile

73.4%