Barak Tawily personal blog

Firefox Local Files Theft – Not Patched Yet

Recently, I was performing a research on Same Origin Policy attacks, I managed to realize that the la version of Firefox (currently 67) is vulnerable to local files theft attack (on any supported OS), due to improper implementation of Same Origin Policy for file scheme URIs. Let’s go over the PoC details then I will…
Points
114
HN comments
73
Submissions
1
Cited by
0 commenters

Security & PrivacyWeb & Frontend2019

On Hacker News

SubmittedTitle on HNPointsComments
Jul 3, 2019Firefox Local Files Theft – Not Patched Yet by akeck11473

Related posts from the same era