CVE-2008-0593: Mozilla Firefox

Medium severity, CVSS 4.3. EPSS: 2% chance of exploitation in the next 30 days.

Gecko-based browsers, including Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8, modify the .href property of stylesheet DOM nodes to the final URI of a 302 redirect, which might allow remote attackers to bypass the Same Origin Policy and read sensitive information from the original URL, such as with Single-Signon systems.

Affected products

• Mozilla Firefox: up to and including 2.0.0.11; version 0.2 only; version 0.9.2 only; version 1.0.2 only; version 1.5.0.2 only; version 1.5.0.12 only; …
• Mozilla Seamonkey: any version; up to and including 1.1.17; version 1.0 only; version 1.0.1 only; version 1.0.2 only; version 1.0.3 only; …

Published 2008-02-09. Last modified 2026-06-16.