CVE-2015-2711

no score yetEPSS 1.9%

Mozilla Firefox before 38.0 does not recognize a referrer policy delivered by a referrer META element in cases of context-menu navigation and middle-click navigation, which allows remote attackers to obtain sensitive information by reading web-server Referer logs that contain private data in a URL, as demonstrated by a private path component.

EPSS: 1.9% chance of exploitation in the next 30 days; higher than 79% of CVEs (scores of 2026-10-31)
CWE: CWE-200
Published: 2015-05-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

mozilla:firefox
opensuse:opensuse

References

http://lists.opensuse.org/opensuse-updates/2015-05/msg00036.html
http://www.mozilla.org/security/announce/2015/mfsa2015-49.html
http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
http://www.securityfocus.com/bid/74611
http://www.ubuntu.com/usn/USN-2602-1

Check your stack JSON