PT-2018-3168
CVE-2018-12396
·
تاريخ النشر
2018-10-23
·
تاريخ التحديث
2024-12-12
الوصف من
CVSS 3.1
6.5
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions
Firefox ESR versions prior to 60.3
Firefox versions prior to 63
Description
The issue allows a WebExtension to run content scripts in disallowed contexts following navigation or other events, potentially leading to privilege escalation on sites where content scripts should not be run. This could enable a remote attacker to elevate their privileges.
Recommendations
For Firefox ESR versions prior to 60.3, update to version 60.3 or later.
For Firefox versions prior to 63, update to version 63 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾