Margaret Leibovic

**Name of the Vulnerable Software and Affected Versions** Mozilla Firefox versions prior to 44.0 on Android **Description** The issue allows man-in-the-middle attackers to replace a theme's images and colors by modifying the client-server data stream, as HTTPS is not ensured for a lightweight-theme installation. **Recommendations** For versions prior to 44.0, update to version 44.0 or later to ensure HTTPS is used for lightweight-theme installations, preventing man-in-the-middle attacks.