Mozilla Firefox CVE-2016-5250 Information Disclosure Vulnerability

Description

Amazon software engineer Catalin Dumitru reported that the URLs of resources loaded after a navigation started (such as in an unload event handler) were leaked to the following page through the Resource Timing API. This leads to potential information disclosure.

Affected Applications

Firefox

CVE References

Other References