PT-2017-3673
CVE-2018-5119
·
Published
2017-11-24
·
Updated
2024-12-12
Description by
CVSS 3.1
5.3
MediumMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions:
Firefox versions prior to 58
Description:
The issue is related to the reader view in Mozilla Firefox, where cross-origin content is displayed despite CORS headers set to prohibit such loading. This could allow access to restricted content. The vulnerability is associated with a lack of protection for service data, potentially enabling a remote attacker to gain unauthorized access to protected information.
Recommendations:
For versions prior to 58, update to version 58 or later to resolve the issue. As a temporary workaround, consider disabling the reader view feature until a patch is available. Restrict access to sensitive information when using the reader view in affected versions.
Found an issue in the description? Have something to add? Feel free to write us 👾