PT-2018-3584
CVE-2018-5137
·
Published
2018-01-24
·
Updated
2024-12-12
Description by
CVSS 2.0
7.8
HighMetricsAV:N/AC:L/Au:N/C:C/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Firefox versions prior to 59
Description
The issue allows a malicious web page to load non-content accessible resources of a legacy extension through a script, using a crafted path string. This does not affect WebExtensions.
Recommendations
For Firefox versions prior to 59, update to version 59 or later to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾