Описание
Style editor traffic in the Developer Tools can be routed through a service worker hosted on a third party website if a user selects error links when these tools are open. This can allow style editor information used within Developer Tools to leak cross-origin. This vulnerability affects Firefox < 58.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| firefox | fixed | 58.0-1 | package |
Примечания
https://www.mozilla.org/en-US/security/advisories/mfsa2018-02/#CVE-2018-5106
EPSS
Связанные уязвимости
Style editor traffic in the Developer Tools can be routed through a service worker hosted on a third party website if a user selects error links when these tools are open. This can allow style editor information used within Developer Tools to leak cross-origin. This vulnerability affects Firefox < 58.
Style editor traffic in the Developer Tools can be routed through a service worker hosted on a third party website if a user selects error links when these tools are open. This can allow style editor information used within Developer Tools to leak cross-origin. This vulnerability affects Firefox < 58.
Style editor traffic in the Developer Tools can be routed through a service worker hosted on a third party website if a user selects error links when these tools are open. This can allow style editor information used within Developer Tools to leak cross-origin. This vulnerability affects Firefox < 58.
Уязвимость реализации редактора стилей компонента Developer Tools браузера Mozilla Firefox, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
ALT-PU-2018-1178: package `firefox` update to version 58.0.2-alt1
EPSS