| Package | Affected versions | Patched versions |
|---|---|---|
| firefox | ≤ 41.0.1 |
The fetch API implementation in Mozilla Firefox before 41.0.2 does not restrict access to the HTTP response body in certain situations where user credentials are supplied but the CORS cross-origin request algorithm is improperly followed, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free