CVE-2015-4518

Mozilla Firefox CVE-2015-4518 describes an improper Reader View whitelist that can bypass CSP protections, enabling cross-site scripting via SVG-related vectors and the about:reader URL in Firefox versions before 42.0. Affected product: Firefox Reader View. Root cause: overly permissive allowlist...

CVE-2015-4518: Improper Neutralization of Input During Web Page Generation

The Reader View implementation in Mozilla Firefox before 42.0 has an improper whitelist, which makes it easier for remote attackers to bypass the Content Security Policy CSP protection mechanism and conduct cross-site scripting XSS attacks via vectors involving SVG animations and the about:reader...

CVE-2015-4518

The Reader View implementation in Mozilla Firefox before 42.0 has an improper whitelist, which makes it easier for remote attackers to bypass the Content Security Policy CSP protection mechanism and conduct cross-site scripting XSS attacks via vectors involving SVG animations and the about:reader...

UBUNTU-CVE-2015-4518

The Reader View implementation in Mozilla Firefox before 42.0 has an improper whitelist, which makes it easier for remote attackers to bypass the Content Security Policy CSP protection mechanism and conduct cross-site scripting XSS attacks via vectors involving SVG animations and the about:reader...

PT-2015-2642

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 42.0 Description The issue is related to an improper whitelist in the Reader View implementation, making it easier for remote attackers to bypass the Content Security Policy CSP protection mechanism. This allo...