CVE-2017-7797: Origin Validation Error

Response header name interning does not have same-origin protections and these headers are stored in a global registry. This allows stored header names to be available cross-origin. This vulnerability affects Firefox 55...

PT-2017-4017

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 55 Description The issue is related to the lack of same-origin protections for response header name interning, allowing stored header names to be available cross-origin. This could potentially enable a remote attacker...