Mozilla Firefox before 49.0 allows user-assisted remote attackers to obtain sensitive full-pathname information during a local-file drag-and-drop operation via crafted JavaScript code...
4.3CVSS6.8AI score0.01383EPSS
SaveExploits0References5
OSV•added 2016/09/22 12:0 a.m.•6 views
UBUNTU-CVE-2016-5279
Mozilla Firefox before 49.0 allows user-assisted remote attackers to obtain sensitive full-pathname information during a local-file drag-and-drop operation via crafted JavaScript code...