PT-2015-5849
CVE-2015-2711
·
Published
2015-05-12
·
Updated
2024-12-12
Description by
CVSS 2.0
4.3
MediumMetricsAV:N/AC:M/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Mozilla Firefox versions prior to 38.0
Description
The issue allows remote attackers to obtain sensitive information by reading web-server Referer logs that contain private data in a URL. This occurs when a referrer policy delivered by a referrer META element is not recognized in cases of context-menu navigation and middle-click navigation.
Recommendations
For versions prior to 38.0, update to version 38.0 or later to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾