CVE-2017-5382: Infoleak
Feed preview for RSS feeds can be used to capture errors and exceptions generated by privileged content, allowing for the exposure of internal information not meant to be seen by web content.
Affected Software
Remediation
Patch Available
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2017-5375
- CVE-2017-5376
- CVE-2017-5377
- CVE-2017-5378
- CVE-2017-5379
- CVE-2017-5380
- CVE-2017-5390
- CVE-2017-5389
- CVE-2017-5396
- CVE-2017-5381
- CVE-2017-5382
- CVE-2017-5383
- CVE-2017-5384
- CVE-2017-5385
- CVE-2017-5386
- CVE-2017-5394
- CVE-2017-5391
- CVE-2017-5392
- CVE-2017-5393
- CVE-2017-5395
- CVE-2017-5387
- CVE-2017-5388
- CVE-2017-5374
- CVE-2017-5373
Frequently Asked Questions
What is the severity of CVE-2017-5382?
CVE-2017-5382 is considered a medium severity vulnerability that can expose internal information through RSS feed previews.
How do I fix CVE-2017-5382?
To fix CVE-2017-5382, users should update their Mozilla Firefox to version 51 or later.
What is the impact of CVE-2017-5382?
The impact of CVE-2017-5382 includes potential exposure of sensitive internal information due to error messages in privileged content.
Which versions of Firefox are affected by CVE-2017-5382?
CVE-2017-5382 affects Mozilla Firefox versions prior to 51.
What types of exploitation are possible with CVE-2017-5382?
Exploitation of CVE-2017-5382 could allow attackers to capture errors and exceptions from privileged content, revealing sensitive information.