Response header name interning does not have same-origin protections and these headers are stored in a global registry. This allows stored header names to be available cross-origin. This vulnerability affects Firefox < 55.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mozilla
Published: 2018-06-11T21:00:00
Updated: 2024-08-05T16:12:28.373Z
Reserved: 2017-04-12T00:00:00
Link: CVE-2017-7797
Vulnrichment
No data.
NVD
Status : Modified
Published: 2018-06-11T21:29:09.640
Modified: 2024-11-21T03:32:40.867
Link: CVE-2017-7797
Redhat