Files
CVEs-PoC/2016/CVE-2016-9900.md
T
2025-09-29 21:09:30 +02:00

1020 B

CVE-2016-9900

Description

External resources that should be blocked when loaded by SVG images can bypass security restrictions through the use of "data:" URLs. This could allow for cross-domain data leakage. This vulnerability affects Firefox < 50.1, Firefox ESR < 45.6, and Thunderbird < 45.6.

POC

Reference

Github

No PoCs found on GitHub currently.