2 matches found
CVE-2018-5132: Exposure of Sensitive Information to an Unauthorized Actor
The Find API for WebExtensions can search some privileged pages, such as "about:debugging", if these pages are open in a tab. This could allow a malicious WebExtension to search for otherwise protected data if a user has it open. This vulnerability affects Firefox 59...
6.5CVSS7.4AI score0.0144EPSS
SaveExploits0References2
PT-2017-4042
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 59 Description The issue is related to the Find API for WebExtensions in Firefox, which can search some privileged pages, such as "about:debugging", if these pages are open in a tab. This could allow a malicious...
7.1CVSS0.0144EPSS
SaveExploits0
20