← Database

CVE-2005-0588

MEDIUM CVSS: 5.0 Published: 2005-05-02 Modified: 2026-06-16

Description

Firefox before 1.0.1 and Mozilla before 1.7.6 does not restrict xsl:include and xsl:import tags in XSLT stylesheets to the current domain, which allows remote attackers to determine the existence of files on the local system.

Affected Platforms

Mozilla FirefoxMozilla Mozilla

Weakness Type

NVD-CWE-Other

References