Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2018-5112

Date: June 11, 2018

Development Tools panels of an extension are required to load URLs for the panels as relative URLs from the extension manifest file but this requirement was not enforced in all instances. This could allow the development tools panel for the extension to load a URL that it should not be able to access, including potentially privileged pages. This vulnerability affects Firefox < 58.

Severity Score

Related Resources (8)

https://www.mozilla.org/security/advisories/mfsa2018-02/
https://usn.ubuntu.com/3544-1/
https://bugzilla.mozilla.org/show_bug.cgi?id=1425224
http://www.securityfocus.com/bid/102786
https://people.canonical.com/~ubuntu-security/cve/CVE-2018-5112
http://www.securitytracker.com/id/1040270
https://nvd.nist.gov/vuln/detail/CVE-2018-5112
https://www.mend.io/vulnerability-database/CVE-2018-5112

Severity Score

Weakness Type (CWE)

Files or Directories Accessible to External Parties

CWE-552

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): HIGH
Integrity (I): NONE
Availability (A): NONE

CVSS v2

Base Score:
Access Vector (AV): NETWORK
Access Complexity (AC): LOW
Authentication (AU): NONE
Confidentiality (C): PARTIAL
Integrity (I): NONE
Availability (A): NONE
Additional information:

Do you need more information?

Contact Us