CVE-2018-5135 | BDVDB-2026-102412 Detail

MozillaFirefox

Description#

WebExtensions can bypass normal restrictions in some circumstances and use "browser.tabs.executeScript" to inject scripts into contexts where this should not be allowed, such as pages from other WebExtensions or unprivileged "about:" pages. This vulnerability affects Firefox < 59.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/103386
https://bugzilla.mozilla.org/show_bug.cgi?id=1431371
http://www.securitytracker.com/id/1040514
https://usn.ubuntu.com/3596-1/
https://www.mozilla.org/security/advisories/mfsa2018-06/

Exploit#

No public exploit known

History#

Version 12018-06-11Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.