NVD

Id
27900  
Name
CVE-2015-7215  
Description
The importScripts function in the Web Workers API implementation in Mozilla Firefox before 43.0 allows remote attackers to bypass the Same Origin Policy by triggering use of the no-cors mode in the fetch API to attempt resource access that throws an exception, leading to information disclosure after a rethrow.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2015-12-16  
Modified Date
2016-12-07  
Seq
2015-7215  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
146788 27900 CVE-2015-7215 FEDORA-2015-51b1105902  View
146789 27900 CVE-2015-7215 FEDORA-2015-7ab3d3afcf  View
146790 27900 CVE-2015-7215 openSUSE-SU-2015:2353  View
146791 27900 CVE-2015-7215 openSUSE-SU-2016:0307  View
146792 27900 CVE-2015-7215 openSUSE-SU-2016:0308  View
146793 27900 CVE-2015-7215 http://www.mozilla.org/security/announce/2015/mfsa2015-140.html  View
146794 27900 CVE-2015-7215 79280  View
146795 27900 CVE-2015-7215 1034426  View
146796 27900 CVE-2015-7215 USN-2833-1  View
146797 27900 CVE-2015-7215 https://bugzilla.mozilla.org/show_bug.cgi?id=1160890  View
146798 27900 CVE-2015-7215 https://github.com/whatwg/html/issues/164  View
146799 27900 CVE-2015-7215 https://github.com/whatwg/html/pull/166  View
146800 27900 CVE-2015-7215 GLSA-201512-10  View
146801 27900 CVE-2015-7215 https://www.w3.org/Bugs/Public/show_bug.cgi?id=28961  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
11094 JVNDB-2015-006414 Mozilla Firefox の Web ワーカー API の実装の importScripts 関数における同一生成元ポリシーを回避される脆弱性 Mozilla Firefox の Web ワーカー API の実装の importScripts 関数には、同一生成元ポリシーを回避される脆弱性が存在します。 CVE-2015-7215 84440 CVE-2015-7215 27900 5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-006414.html 2015-12-15 2015-12-17 View