CVE-2018-5133: Exposure of Sensitive Information to an Unauthorized Actor

If the "app.support.baseURL" preference is changed by a malicious local program to contain HTML and script content, this content is not sanitized. It will be executed if a user loads "chrome://browser/content/preferences/in-content/preferences.xul" directly in a tab and executes a search. This...

CVE-2018-5133

If the "app.support.baseURL" preference is changed by a malicious local program to contain HTML and script content, this content is not sanitized. It will be executed if a user loads "chrome://browser/content/preferences/in-content/preferences.xul" directly in a tab and executes a search. This...

PT-2018-3583

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 59 Description The issue is related to the "app.support.baseURL" preference, which can be modified by a malicious local program to include HTML and script content. This content is not sanitized and will be executed...