CVE-2014-1591: Mozilla Firefox

Medium severity, CVSS 4.3. EPSS: 1.2% chance of exploitation in the next 30 days.

Mozilla Firefox 33.0 and SeaMonkey before 2.31 include path strings in CSP violation reports, which allows remote attackers to obtain sensitive information via a web site that receives a report after a redirect.

Affected products

• Mozilla Firefox: version 33.0 only
• Mozilla Seamonkey: up to and including 2.30

Published 2014-12-11. Last modified 2026-06-17.