CVE-2017-5385: Infoleak
Published Jan 24, 2017
·Updated
Data sent with in multipart channels, such as the multipart/x-mixed-replace MIME type, will ignore the referrer-policy response header, leading to potential information disclosure for sites using this header.
Affected Software
2 affected componentsFixes available
Mozilla Firefox<51
51
Mozilla Firefox<51.0
Remediation
Patch Available
Event History
Jan 24, 2017
CVE Published
12:00 AM
Jun 11, 2018
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
DescriptionWeakness
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2017-5375
- CVE-2017-5376
- CVE-2017-5377
- CVE-2017-5378
- CVE-2017-5379
- CVE-2017-5380
- CVE-2017-5390
- CVE-2017-5389
- CVE-2017-5396
- CVE-2017-5381
- CVE-2017-5382
- CVE-2017-5383
- CVE-2017-5384
- CVE-2017-5385
- CVE-2017-5386
- CVE-2017-5394
- CVE-2017-5391
- CVE-2017-5392
- CVE-2017-5393
- CVE-2017-5395
- CVE-2017-5387
- CVE-2017-5388
- CVE-2017-5374
- CVE-2017-5373
Frequently Asked Questions
1
What is the severity of CVE-2017-5385?
The severity of CVE-2017-5385 is classified as moderate, potentially leading to information disclosure.
2
How do I fix CVE-2017-5385?
To fix CVE-2017-5385, upgrade Mozilla Firefox to version 52 or later.
3
What is the impact of CVE-2017-5385?
CVE-2017-5385 can lead to information disclosure by ignoring the referrer-policy response header.
4
Which versions of Firefox are affected by CVE-2017-5385?
CVE-2017-5385 affects Mozilla Firefox versions prior to 52.
5
Is CVE-2017-5385 under active exploitation?
As of the last update, there is no indication that CVE-2017-5385 is under active exploitation.