cve/2015/CVE-2015-4519.md

CVE-2015-4519

Description

Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allow user-assisted remote attackers to bypass intended access restrictions and discover a redirect's target URL via crafted JavaScript code that executes after a drag-and-drop action of an image into a TEXTBOX element.

POC

Reference

• http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
• http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
• https://bugzilla.mozilla.org/show_bug.cgi?id=1189814

Github

• https://github.com/ARPSyndicate/cvemon