CVE-2016-1955
Fixed in a distro release EPSS 2%
Mozilla Firefox before 45.0 allows remote attackers to bypass the Same Origin Policy and obtain sensitive information by reading a Content Security Policy (CSP) violation report that contains path information associated with an IFRAME element.
Products: novell suse_package_hub_for_suse_linux_enterprise, opensuse leap, opensuse, mozilla firefox
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | firefox-esr | 45.0esr-1 |
| Debian 13 | firefox-esr | 45.0esr-1 |
| Debian 14 | firefox-esr | 45.0esr-1 |
| SUSE Package Hub 12 | MozillaThunderbird | 45.2-6.1 |
| Ubuntu 14.04 LTS | firefox | 45.0+build2-0ubuntu0.14.04.1 |
| openSUSE Tumbleweed | MozillaFirefox | 50.1.0-1.1 |
| openSUSE Tumbleweed | MozillaThunderbird | 45.5.1-1.1 |
| openSUSE Tumbleweed | firefox-esr | 128.5.1-1.1 |