Lucene search

K
redhatcveRedhat.comRH:CVE-2018-12395
HistoryApr 07, 2020 - 11:09 a.m.

CVE-2018-12395

2020-04-0711:09:29
redhat.com
access.redhat.com
12

0.016 Low

EPSS

Percentile

87.3%

By rewriting the Host: request headers using the webRequest API, a WebExtension can bypass domain restrictions through domain fronting. This would allow access to domains that share a host that are otherwise restricted. This vulnerability affects Firefox ESR < 60.3 and Firefox < 63.