The vulnerability of the Thunderbird email client, which allows a remote attacker to forge cross-site requests

A vulnerability exists in the Thunderbird email client’s navigator.sendBeacon function, related to the handling of HTTP status codes 30x. Exploiting this vulnerability allows a malicious actor to bypass CORS access control mechanisms and forge cross-domain requests by using a specially crafted we...

The vulnerability of the Firefox ESR browser allows a malicious actor to forge cross-site requests.

The vulnerability of Firefox ESR’s navigator.sendBeacon function, related to the processing of HTTP status codes 30x. Exploiting this vulnerability allows a malicious actor to bypass CORS access controls and forge cross-site requests by using a specially crafted website...

The vulnerability of the Firefox browser, which allows a remote attacker to forge cross-site requests

The vulnerability of the Firefox browser in the navigator.sendBeacon function, related to the processing of HTTP status codes 30x. Exploiting this vulnerability allows a malicious actor to bypass CORS access control mechanisms and forge cross-domain requests by using a specially crafted web page...

UBUNTU-CVE-2015-0807

The navigator.sendBeacon implementation in Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 processes HTTP 30x status codes for redirects after a preflight request has occurred, which allows remote attackers to bypass intended CORS access-control checks and...