VULNERABILITY INTELLIGENCE
CVE-2015-0822
CVSS score4.3 MEDIUM
EPSS probability2.55%
CISA KEVNot currently listed
Published2015-02-25
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:N/C:P/I:N/A:N
Description
The Form Autocompletion feature in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allows remote attackers to read arbitrary files via crafted JavaScript code.
Weakness classification
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor