Security Advisory

CVE-2015-7188

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2015-11-05 02:00:00

Last updated 2024-08-06 07:43:44

Assigner mozilla

CVSS score not scored

State PUBLISHED

Description

Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 allow remote attackers to bypass the Same Origin Policy for an IP address origin, and conduct cross-site scripting (XSS) attacks, by appending whitespace characters to an IP address string.

← Browse all CVEs View on cve.org ↗