Security Advisory
CVE-2015-7197
5
Vulnerability Description
Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 improperly control the ability of a web worker to create a WebSocket object, which allows remote attackers to bypass intended mixed-content restrictions via crafted JavaScript code.
Published Date
November 5, 2015
Official Source
NIST NVD Advisory