CVE-2018-12358

Publication date

2018-10-18 13:00:00

Family

mozilla

State

PUBLISHED

Description

Service workers can use redirection to avoid the tainting of cross-origin resources in some instances, allowing a malicious site to read responses which are supposed to be opaque. This vulnerability affects Firefox < 61.