VULNERABILITY INTELLIGENCE

CVE-2016-5260

CVSS score6.5 MEDIUM

EPSS probability1.38%

CISA KEVNot currently listed

Published2016-08-05

Last modified2026-06-17

Description

Mozilla Firefox before 48.0 mishandles changes from 'INPUT type="password"' to 'INPUT type="text"' within a single Session Manager session, which might allow attackers to discover cleartext passwords by reading a session restoration file.