Beveiligingsadvies

CVE-2017-5386

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2018-06-11 21:00:00
Laatst bijgewerkt 2024-08-05 14:55:35
Toegewezen door mozilla
CVSS-score geen score
Status PUBLISHED

Beschrijving

WebExtension scripts can use the "data:" protocol to affect pages loaded by other web extensions using this protocol, leading to potential data disclosure or privilege escalation in affected extensions. This vulnerability affects Firefox ESR < 45.7 and Firefox < 51.