CVE

Id
84492  
CVE No.
CVE-2015-7215  
Status
Candidate  
Description
The importScripts function in the Web Workers API implementation in Mozilla Firefox before 43.0 allows remote attackers to bypass the Same Origin Policy by triggering use of the no-cors mode in the fetch API to attempt resource access that throws an exception, leading to information disclosure after a rethrow.  
Phase
Assigned (20150916)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
748921 84492 CVE-2015-7215 MISC:https://github.com/whatwg/html/issues/164  View
748922 84492 CVE-2015-7215 MISC:https://github.com/whatwg/html/pull/166  View
748923 84492 CVE-2015-7215 MISC:https://www.w3.org/Bugs/Public/show_bug.cgi?id=28961  View
748924 84492 CVE-2015-7215 CONFIRM:http://www.mozilla.org/security/announce/2015/mfsa2015-140.html  View
748925 84492 CVE-2015-7215 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=1160890  View
748926 84492 CVE-2015-7215 FEDORA:FEDORA-2015-51b1105902  View
748927 84492 CVE-2015-7215 URL:http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174083.html  View
748928 84492 CVE-2015-7215 FEDORA:FEDORA-2015-7ab3d3afcf  View
748929 84492 CVE-2015-7215 URL:http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174253.html  View
748930 84492 CVE-2015-7215 GENTOO:GLSA-201512-10  View
748931 84492 CVE-2015-7215 URL:https://security.gentoo.org/glsa/201512-10  View
748932 84492 CVE-2015-7215 SUSE:openSUSE-SU-2016:0307  View
748933 84492 CVE-2015-7215 URL:http://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html  View
748934 84492 CVE-2015-7215 SUSE:openSUSE-SU-2016:0308  View
748935 84492 CVE-2015-7215 URL:http://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html  View
748936 84492 CVE-2015-7215 SUSE:openSUSE-SU-2015:2353  View
748937 84492 CVE-2015-7215 URL:http://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html  View
748938 84492 CVE-2015-7215 UBUNTU:USN-2833-1  View
748939 84492 CVE-2015-7215 URL:http://www.ubuntu.com/usn/USN-2833-1  View
748940 84492 CVE-2015-7215 BID:79280  View
748941 84492 CVE-2015-7215 URL:http://www.securityfocus.com/bid/79280  View
748942 84492 CVE-2015-7215 SECTRACK:1034426  View

Related JVN