CVE-2017-5382

Feed preview for RSS feeds can be used to capture errors and exceptions generated by privileged content, allowing for the exposure of internal information not meant to be seen by web content. This vulnerability affects Firefox < 51.

• CWE-200

• http://www.securityfocus.com/bid/95763Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1037693Third Party Advisory, VDB Entry
• https://bugzilla.mozilla.org/show_bug.cgi?id=1295322Issue Tracking, Patch
• https://www.mozilla.org/security/advisories/mfsa2017-01/Vendor Advisory
• http://www.securityfocus.com/bid/95763Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1037693Third Party Advisory, VDB Entry
• https://bugzilla.mozilla.org/show_bug.cgi?id=1295322Issue Tracking, Patch
• https://www.mozilla.org/security/advisories/mfsa2017-01/Vendor Advisory

Published

Jun 11, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-5376Use-after-free while manipulating XSL in XSLT documents. Thi…
• CVE-2017-5377A memory corruption vulnerability in Skia that can occur whe…
• CVE-2017-5378Hashed codes of JavaScript objects are shared between pages.…
• CVE-2017-5379Use-after-free vulnerability in Web Animations when interact…
• CVE-2017-5380A potential use-after-free found through fuzzing during DOM …
• CVE-2017-5381The "export" function in the Certificate Viewer can force lo…
• CVE-2017-5383URLs containing certain unicode glyphs for alternative hyphe…
• CVE-2017-5384Proxy Auto-Config (PAC) files can specify a JavaScript funct…
• CVE-2017-5385Data sent with in multipart channels, such as the multipart/…
• CVE-2017-5386WebExtension scripts can use the "data:" protocol to affect …
• CVE-2017-5387The existence of a specifically requested local file can be …
• CVE-2017-5388A STUN server in conjunction with a large number of "webkitR…