Related Vulnerabilities: CVE-2016-5279  

The full path to local files is available to scripts when local files are drag and dropped into Firefox.

Severity Medium

Remote Yes

Type Information disclosure

Description

The full path to local files is available to scripts when local files are drag and dropped into Firefox.

AVG-24 firefox 48.0.2-1 49.0-1 Critical Fixed

22 Sep 2016 ASA-201609-22 AVG-24 firefox Critical multiple issues

https://bugzilla.mozilla.org/show_bug.cgi?id=1249522