CVE-2016-2816

CVSS v3.0 6.5 (Medium)

CVSS v2.0 4.3 (Medium)

EPSS 0.62 % (79^th)

Affected Products 1

Advisories 3

Mozilla Firefox before 46.0 allows remote attackers to bypass the Content Security Policy (CSP) protection mechanism via the multipart/x-mixed-replace content type.

Weaknesses

CWE-284: Improper Access Control

CVE Status: PUBLISHED
CNA: Mozilla Corporation
Published Date: 2016-04-30 17:59:13
(8 years ago)
Updated Date: 2017-07-01 01:29:40
(7 years ago)

Affected Products

Mozilla

Firefox

Configuration #1

		CPE23	From	Up To
	Mozilla Firefox 45.0.2 and prior versions	cpe:2.3:a:mozilla:firefox		<= 45.0.2