VULNERABILITY INTELLIGENCE
CVE-2016-5288
CVSS score5.9 MEDIUM
EPSS probability1.77%
CISA KEVNot currently listed
Published2018-06-11
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Description
Web content could access information in the HTTP cache if e10s is disabled. This can reveal some visited URLs and the contents of those pages. This issue affects Firefox 48 and 49. This vulnerability affects Firefox < 49.0.2.
Weakness classification
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
Primary references
- security@mozilla.org — Third Party Advisory, VDB Entry
- security@mozilla.org — Third Party Advisory, VDB Entry
- security@mozilla.org — Issue Tracking, Vendor Advisory
- security@mozilla.org — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Issue Tracking, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory