Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote attackers to bypass the same origin policy by causing the browser to issue an XMLHttpRequest to an attacker-controlled resource that uses a 302 redirect to a resource in a different domain, then reading content from the response, aka "response disclosure."
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Mozilla Firefox 302重定向 响应泄露漏洞
Vulnerability Description
Firefox是Mozilla所发布的开源WEB浏览器。 如果对302重新定向到不同域中资源的同源资源执行了XMLHttpRequest请求的话，跨域资源的响应是发布XHR的站点可读的。标记为HttpOnly的Cookie不可读，但XHR响应可能泄露其他敏感数据，包括响应体中的URL参数和内容。
CVSS Information
N/A
Vulnerability Type
N/A