https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-04T14:10:28.879269+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2015-7184 CVE-2015-7184 2026-10-04T14:10:28.881686+00:00

The fetch API implementation in Mozilla Firefox before 41.0.2 does not restrict access to the HTTP response body in certain situations where user credentials are supplied but the CORS cross-origin request algorithm is improperly followed, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.

 https://vulnerability.circl.lu/vuln/usn-2768-1 USN-2768-1 — firefox vulnerability 2026-10-04T14:10:28.881752+00:00

Affected: Ubuntu:14.04:LTS: firefox

Abdulrahman Alqabandi and Ben Kelly discovered that the fetch() API did not correctly implement the Cross Origin Resource Sharing (CORS) specification. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to obtain sensitive information from other origins. (CVE-2015-7184)