CVE
CVE-2018-18495
WebExtension content scripts can be loaded into about: pages in some circumstances, in violation of the permissions granted to extensions. This could allow an extension to interfere with the loading and usage of these pages and use capabilities that were intended to be restricted from extensions. This vulnerability affects Firefox < 64.
- Severity
- MEDIUM
- CVSS
- 6.5
- Published
- Modified
Linked Releases
| Distribution | Release | Status | Evidence |
|---|---|---|---|
| Ubuntu | 18.04.6 amd64 desktop | unknown | source |
| Ubuntu | 18.04.6 amd64 live-server | unknown | source |
| Ubuntu | 16.04.7 amd64 desktop | unknown | source |
| Ubuntu | 16.04.6 i386 desktop | unknown | source |
| Ubuntu | 16.04.7 amd64 server | unknown | source |
| Ubuntu | 16.04.6 i386 server | unknown | source |
| Ubuntu | 14.04.6 amd64 desktop | unknown | source |
| Ubuntu | 14.04.6 i386 desktop | unknown | source |
| Ubuntu | 14.04.6 amd64 server | unknown | source |
| Ubuntu | 14.04.6 i386 server | unknown | source |
References
- http://www.securityfocus.com/bid/106167
- https://bugzilla.mozilla.org/show_bug.cgi?id=1427585
- https://usn.ubuntu.com/3844-1/
- https://www.mozilla.org/security/advisories/mfsa2018-29/
- http://www.securityfocus.com/bid/106167
- https://bugzilla.mozilla.org/show_bug.cgi?id=1427585
- https://usn.ubuntu.com/3844-1/
- https://www.mozilla.org/security/advisories/mfsa2018-29/