UBUNTU-CVE-2014-1591

Advisory lineage Upstream: 1 Downstream: 1
Upstream
CVE-2014-1591
Downstream
USN-2424-1
Published: 02 Dec 2014, 00:00
Last modified:22 Apr 2026, 09:36

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

02 Dec 2014, 00:00
Published
Vulnerability first disclosed
22 Apr 2026, 09:36
Last Modified
Vulnerability information updated

Description

Mozilla Firefox 33.0 and SeaMonkey before 2.31 include path strings in CSP violation reports, which allows remote attackers to obtain sensitive information via a web site that receives a report after a redirect.

Affected Systems

  • ubuntu•firefox

    < 34.0+build2-0ubuntu0.14.04.1

References (4)