CVE-2014-1591

CVE-2014-1591 describes an information disclosure vulnerability in Mozilla Firefox 33.0 and SeaMonkey before 2.31. These browsers inadvertently included path strings in Content Security Policy (CSP) violation reports, allowing remote attackers to obtain sensitive information if a website received such a report after a redirect. The vulnerability has a CVSS score of 4.3 (medium severity), indicating a network-based attack with medium complexity and potential for partial confidentiality impact. There is no evidence of active exploitation, no public exploit code (Metasploit, Nuclei, ExploitDB), and it is not listed in the KEV catalog, though it did receive some community and media attention at the time of disclosure.