cve/2015/CVE-2015-0822.md

CVE-2015-0822

Description

The Form Autocompletion feature in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allows remote attackers to read arbitrary files via crafted JavaScript code.

POC

Reference

• http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
• https://bugzilla.mozilla.org/show_bug.cgi?id=1110557

Github

• https://github.com/JasonLOU/security
• https://github.com/numirias/security