Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2018-5134

Опубликовано: 11 июн. 2018
Источник: debian

Описание

WebExtensions may use "view-source:" URLs to view local "file:" URL content, as well as content stored in "about:cache", bypassing restrictions that only allow WebExtensions to view specific content. This vulnerability affects Firefox < 59.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
firefoxfixed59.0-1package

Примечания

  • https://www.mozilla.org/en-US/security/advisories/mfsa2018-06/

Связанные уязвимости

CVSS3: 7.5
ubuntu
около 8 лет назад

WebExtensions may use "view-source:" URLs to view local "file:" URL content, as well as content stored in "about:cache", bypassing restrictions that only allow WebExtensions to view specific content. This vulnerability affects Firefox < 59.

CVSS3: 7.5
nvd
около 8 лет назад

WebExtensions may use "view-source:" URLs to view local "file:" URL content, as well as content stored in "about:cache", bypassing restrictions that only allow WebExtensions to view specific content. This vulnerability affects Firefox < 59.

CVSS3: 7.5
github
больше 4 лет назад

WebExtensions may use "view-source:" URLs to view local "file:" URL content, as well as content stored in "about:cache", bypassing restrictions that only allow WebExtensions to view specific content. This vulnerability affects Firefox < 59.

CVSS3: 7.5
fstec
больше 8 лет назад

Уязвимость расширения WebExtensions браузера Mozilla Firefox, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации