Search for vulnerabilities
Vulnerability ID | VCID-pgzb-622e-cyfw |
Aliases |
CVE-2015-4519
|
Summary | Security researcher Mario Gomes reported that when a previously loaded image on a page is drag and dropped into content after a redirect, the redirected URL is available to scripts. This is a violation of the Fetch specification's defined behavior for "Atomic HTTP redirect handling" which states that redirected URLs are not exposed to any APIs. This can allow for information leakage. In general this flaw cannot be exploited through email in the Thunderbird product because scripting is disabled, but is potentially a risk in browser or browser-like contexts. |
Status | Published |
Exploitability | 0.5 |
Weighted Severity | 0.0 |
Risk | None |
Affected and Fixed Packages | Package Details |
Reference id | Reference type | URL |
---|---|---|
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4519.json | ||
https://api.first.org/data/v1/epss?cve=CVE-2015-4519 | ||
1265778 | https://bugzilla.redhat.com/show_bug.cgi?id=1265778 | |
CVE-2015-4519 | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4519 | |
mfsa2015-110 | https://www.mozilla.org/en-US/security/advisories/mfsa2015-110 | |
RHSA-2015:1834 | https://access.redhat.com/errata/RHSA-2015:1834 | |
RHSA-2015:1852 | https://access.redhat.com/errata/RHSA-2015:1852 | |
USN-2743-1 | https://usn.ubuntu.com/2743-1/ | |
USN-2754-1 | https://usn.ubuntu.com/2754-1/ |
Percentile | 0.43399 |
EPSS Score | 0.00208 |
Published At | July 30, 2025, 12:55 p.m. |
Date | Actor | Action | Source | VulnerableCode Version |
---|---|---|---|---|
2025-07-31T08:10:52.607114+00:00 | Mozilla Importer | Import | https://github.com/mozilla/foundation-security-advisories/blob/master/announce/2015/mfsa2015-110.md | 37.0.0 |