Vulnerabilities (CVE)

Filtered by vendor Greasemonkey Subscribe
Filtered by product Greasemonkey
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2005-2455 1 Greasemonkey 1 Greasemonkey 2024-02-04 5.0 MEDIUM N/A
Greasemonkey before 0.3.5 allows remote web servers to (1) read arbitrary files via a GET request to a file:// URL in the GM_xmlhttpRequest API function, (2) list installed scripts using GM_scripts, or obtain sensitive information via (3) GM_setValue and GM_getValue.