CVE-2018-18494

A same-origin policy violation allowing the theft of cross-origin URL entries when using the Javascript location property to cause a redirection to another site using performance.getEntries. This is a same-origin policy violation and could allow for data theft. This vulnerability affects...

PT-2018-2710

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 64 Firefox ESR versions prior to 60.4 Thunderbird versions prior to 60.4 Description The issue is related to a same-origin policy violation, which can be exploited by a remote attacker to redirect users to malicious...