CVE-2015-0822

Mozilla: Reading of local files through manipulation of form autocomplete (MFSA 2015-24)

Published Feb 25, 2015 CVSS 2.0 · 4.3 Medium EPSS 2.2% KEV · Not listed
Description
The Form Autocompletion feature in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allows remote attackers to read arbitrary files via crafted JavaScript code.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-3174-1 iceweasel security update
Debian DSA Debian DSA DSA-3179-1 icedove security update
EUVD EUVD EUVD-2015-0835 The Form Autocompletion feature in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allows remote attackers to read arbitrary files via crafted JavaScript code.
Ubuntu USN Ubuntu USN USN-2505-1 Firefox vulnerabilities
Ubuntu USN Ubuntu USN USN-2506-1 Thunderbird vulnerabilities
History
Type Values Removed Values Added
CPEs cpe:2.3:a:mozilla:firefox_esr:31.0:*:*:*:*:*:*:*
Type Values Removed Values Added
CPEs cpe:2.3:a:mozilla:firefox_esr:31.1.1:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:31.1.1:*:*:*:*:*:*:*
Weaknesses

Sources

Status
PUBLISHED
Assigner
mozilla
Published
Updated
Aug 6, 2024, 4:26 AM
Reserved
Jan 7, 2015, 12:00 AM
Status
Modified
Published
Feb 25, 2015, 11:59 AM
Modified
Jun 17, 2026, 12:20 AM
Severity
Moderate
Public date
Feb 24, 2015, 12:00 AM