CVE-2018-12396

Name of the Vulnerable Software and Affected Versions Firefox ESR versions prior to 60.3 Firefox versions prior to 63

Description The issue allows a WebExtension to run content scripts in disallowed contexts following navigation or other events, potentially leading to privilege escalation on sites where content scripts should not be run. This could enable a remote attacker to elevate their privileges.

Recommendations For Firefox ESR versions prior to 60.3, update to version 60.3 or later. For Firefox versions prior to 63, update to version 63 or later.