CVE-2015-4483
Fixed in a distro release EPSS 2%
Mozilla Firefox before 40.0 allows man-in-the-middle attackers to bypass a mixed-content protection mechanism via a feed: URL in a POST request.
Products: oracle solaris, mozilla firefox, opensuse
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu 14.04 LTS | firefox | 40.0+build4-0ubuntu0.14.04.4 |
| openSUSE Tumbleweed | MozillaFirefox | 50.1.0-1.1 |
| openSUSE Tumbleweed | firefox-esr | 128.5.1-1.1 |