Security Advisory

CVE-2018-5134

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2018-06-11 21:00:00
Last updated 2024-08-05 05:26:46
Assigner mozilla
State PUBLISHED

Description

WebExtensions may use "view-source:" URLs to view local "file:" URL content, as well as content stored in "about:cache", bypassing restrictions that only allow WebExtensions to view specific content. This vulnerability affects Firefox < 59.