| Package | Affected versions | Patched versions |
|---|---|---|
| firefox | ≤ 47.0.1 |
Mozilla Firefox before 48.0 mishandles changes from 'INPUT type="password"' to 'INPUT type="text"' within a single Session Manager session, which might allow attackers to discover cleartext passwords by reading a session restoration file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free