CVE-2017-5385: Mozilla Firefox

High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days.

Data sent with in multipart channels, such as the multipart/x-mixed-replace MIME type, will ignore the referrer-policy response header, leading to potential information disclosure for sites using this header. This vulnerability affects Firefox < 51.

Affected products

• Mozilla Firefox: before 51.0 (fixed in 51.0)

Published 2018-06-11. Last modified 2026-06-17.