Lucene search

K
redhatcveRedhat.comRH:CVE-2018-12399
HistoryMar 28, 2019 - 10:50 a.m.

CVE-2018-12399

2019-03-2810:50:09
redhat.com
access.redhat.com
5

0.006 Low

EPSS

Percentile

78.2%

When a new protocol handler is registered, the API accepts a title argument which can be used to mislead users about which domain is registering the new protocol. This may result in the user approving a protocol handler that they otherwise would not have. This vulnerability affects Firefox < 63.