2 matches found
CVE-2016-5260: Exposure of Sensitive Information to an Unauthorized Actor
Mozilla Firefox before 48.0 mishandles changes from 'INPUT type="password"' to 'INPUT type="text"' within a single Session Manager session, which might allow attackers to discover cleartext passwords by reading a session restoration file...
6.5CVSS7.5AI score0.01379EPSS
SaveExploits0References2
UBUNTU-CVE-2016-5260
Mozilla Firefox before 48.0 mishandles changes from 'INPUT type="password"' to 'INPUT type="text"' within a single Session Manager session, which might allow attackers to discover cleartext passwords by reading a session restoration file...
6.5CVSS6.9AI score0.01379EPSS
SaveExploits0References5
20