Lucene search
Mozilla FoundationMFSA2015-49HistoryMay 12, 2015 - 12:00 a.m.
Referrer policy ignored when links opened by middle-click and context menu — Mozilla
2015-05-1200:00:00
Mozilla Foundation
www.mozilla.org
20
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
EPSS
0.003
Percentile
69.6%
Security researcher Alex Verstak reported that is ignored when a link is opened through the context menu or a middle-click by mouse. This means that, in some situations, the referrer policy is ignored when opening links in new tabs and may cause some pages to open without an HTTP Referer header being set according to the author’s intended policy.
Affected configurations
Node
mozillafirefoxRange<38
ORmozillaseamonkeyRange<2.35
Related
cvelist
cvelist
CVE-2015-2711
2015-05-14 10:00:00
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2015-49) - Linux
2021-11-11 00:00:00
Ubuntu: Security Advisory (USN-2602-1)
2015-06-09 00:00:00
Mozilla Firefox Multiple Vulnerabilities-01 (May 2015) - Mac OS X
2015-05-21 00:00:00
ubuntucve
ubuntucve
CVE-2015-2711
2015-05-13 00:00:00
nvd
nvd
CVE-2015-2711
2015-05-14 10:59:04
prion
prion
Path traversal
2015-05-14 10:59:00
cve
cve
CVE-2015-2711
2015-05-14 10:59:04
nessus
nessus
Ubuntu 14.04 LTS : Firefox vulnerabilities (USN-2602-1)
2015-05-13 00:00:00
openSUSE Security Update : MozillaFirefox (openSUSE-2015-375)
2015-05-26 00:00:00
Firefox < 38.0 Multiple Vulnerabilities (Mac OS X)
2015-05-13 00:00:00
archlinux
archlinux
firefox: multiple issues
2015-05-13 00:00:00
ubuntu
ubuntu
Firefox vulnerabilities
2015-05-13 00:00:00
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2015-05-13 00:00:00
kaspersky
kaspersky
KLA10584 Multiple vulnerabilities in Mozilla products
2015-05-12 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2015-05-12 00:00:00
mageia
mageia
Updated iceape packages fix security vulnerabilities
2015-09-08 10:20:40
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2016-05-31 00:00:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
EPSS
0.003
Percentile
69.6%
Related for MFSA2015-49