Lucene search

K
mozillaMozilla FoundationMFSA2015-82
HistoryAug 11, 2015 - 12:00 a.m.

Redefinition of non-configurable JavaScript object properties — Mozilla

2015-08-1100:00:00
Mozilla Foundation
www.mozilla.org
13

0.006 Low

EPSS

Percentile

78.9%

Security researcher André Bargull reported non-configurable properties on JavaScript objects can be redefined while parsing JSON in violation of the ECMAScript 6 standard. This allows malicious web content to bypass same-origin policy by editing these properties to arbitrary values.

CPENameOperatorVersion
firefoxlt40
firefox esrlt38.2
seamonkeylt2.35