What is CVE-2016-5288?

CVE-2016-5288 is a medium-severity vulnerability in Mozilla Firefox, classified under Information Disclosure. CVSS score: 5.9/10. Published 2018-06-11.

How severe is CVE-2016-5288?

Medium severity. CVSS v3 base score is 5.9 out of 10.

Information disclosure in Mozilla Firefox

CVE-2016-5288

Web content could access information in the HTTP cache if e10s is disabled. This can reveal some visited URLs and the contents of those pages. This issue affects Firefox 48 and 49. This vulnerability affects Firefox < 49.0.2.

Vulnerability class: Information Disclosure

EPSS: 0.018 (76.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.9 (Medium). Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Mozilla Firefox — versions unspecified

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

security@mozilla.org (x_refsource_CONFIRM, Issue Tracking, Vendor Advisory)
security@mozilla.org (x_refsource_CONFIRM, Vendor Advisory)
security@mozilla.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
security@mozilla.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)

Frequently asked questions

What is CVE-2016-5288?: CVE-2016-5288 is a medium-severity vulnerability in Mozilla Firefox, classified under Information Disclosure. CVSS score: 5.9/10. Published 2018-06-11.
How severe is CVE-2016-5288?: Medium severity. CVSS v3 base score is 5.9 out of 10.