mirror of
https://github.com/0xMarcio/cve.git
synced 2026-03-28 06:01:13 +01:00
685 B
685 B
CVE-2016-5266
Description
Mozilla Firefox before 48.0 does not properly restrict drag-and-drop (aka dataTransfer) actions for file: URIs, which allows user-assisted remote attackers to access local files via a crafted web site.
POC
Reference
Github
No PoCs found on GitHub currently.