PT-2017-3679
CVE-2018-5112
·
Publicado
2017-12-14
·
Atualizado
2024-12-12
Descrição por
CVSS 3.1
7.5
AltaMétricasAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions:
Firefox versions prior to 58
Description:
The issue arises from the development tools panels of an extension not being properly restricted to load URLs as relative URLs from the extension manifest file. This could potentially allow a development tools panel to access privileged pages it should not have access to. The vulnerability may be exploited by a remote attacker to gain unauthorized access to protected information.
Recommendations:
For versions prior to 58, update to version 58 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive information and privileged pages until the update can be applied.
Explorabilidade
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾