CVE-2017-5386

WebExtension scripts can use the "data:" protocol to affect pages loaded by other web extensions using this protocol, leading to potential data disclosure or privilege escalation in affected extensions. This vulnerability affects Firefox ESR < 45.7 and Firefox < 51.

Score
CVSS 3.0 7.3 High
Status
Modified - security@mozilla.org
Published
2018-06-11
Last modified
2024-08-05

Affected products

References

 
 
© AVABIS GmbH privacypolicy about