0.005 Low
EPSS
Percentile
76.7%
By using the reflected URL in some special resource URIs, such as chrome:, it is possible to inject stylesheets and bypass Content Security Policy (CSP). This vulnerability affects Firefox < 63.
bugzilla.redhat.com/show_bug.cgi?id=1693621
www.cve.org/CVERecord?id=CVE-2018-12398 https://nvd.nist.gov/vuln/detail/CVE-2018-12398 https://www.mozilla.org/en-US/security/advisories/mfsa2018-26/#CVE-2018-12398