CVE-2015-4520: Medium severity firefox vulnerability
Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allow remote attackers to bypass CORS preflight protection mechanisms by leveraging (1) duplicate cache-key generation or (2) retrieval of a value from an incorrect HTTP Access-Control- response header.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-4520?
CVE-2015-4520 has been assigned a medium severity level due to its potential to allow unauthorized access to resources.
How do I fix CVE-2015-4520?
To remediate CVE-2015-4520, users should update Mozilla Firefox to version 41.0 or later, or Firefox ESR to version 38.3 or later.
What is affected by CVE-2015-4520?
CVE-2015-4520 affects Mozilla Firefox versions before 41.0 and Firefox ESR versions before 38.3.
What types of attacks does CVE-2015-4520 allow?
CVE-2015-4520 allows remote attackers to bypass CORS preflight protections through method exploitation.
Who is impacted by CVE-2015-4520?
Users of vulnerable versions of Mozilla Firefox and Firefox ESR are at risk from CVE-2015-4520.