Unrated severityNVD Advisory· Published Aug 4, 2005· Updated Jun 16, 2026
CVE-2005-2455
CVE-2005-2455
Description
Greasemonkey before 0.3.5 allows remote web servers to (1) read arbitrary files via a GET request to a file:// URL in the GM_xmlhttpRequest API function, (2) list installed scripts using GM_scripts, or obtain sensitive information via (3) GM_setValue and GM_getValue.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:a:greasemonkey:greasemonkey:0.3.3:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:greasemonkey:greasemonkey:0.3.3:*:*:*:*:*:*:*
- (no CPE)range: <0.3.5
Patches
Vulnerability mechanics
References
11- greaseblog.blogspot.com/2005/07/mandatory-greasemonkey-update.htmlnvdPatch
- greasemonkey.mozdev.org/changes/0.3.5.htmlnvdPatch
- secunia.com/advisories/16128nvdPatchVendor Advisory
- mozdev.org/pipermail/greasemonkey/2005-July/004000.htmlnvdExploit
- securitytracker.com/idnvdExploitPatch
- www.securiteam.com/securitynews/5CP0P20GBK.htmlnvdExploitPatch
- www.securityfocus.com/bid/14336nvdExploitPatch
- mozdev.org/pipermail/greasemonkey/2005-July/004022.htmlnvd
- www.osvdb.org/18154nvd
- www.vupen.com/english/advisories/2005/1147nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/21453nvd
News mentions
0No linked articles in our index yet.