CVE-2020-6823

A malicious extension could have called browser.identity.launchWebAuthFlow, controlling the redirecturi, and through the Promise returned, obtain the Auth code and gain access to the user's account at the service provider. This vulnerability affects Firefox 75...

CVE-2020-6823: Missing Authorization

A malicious extension could have called browser.identity.launchWebAuthFlow , controlling the redirecturi, and through the Promise returned, obtain the Auth code and gain access to the user's account at the service provider. This vulnerability affects Firefox 75...

CVE-2020-6823

A malicious extension could have called browser.identity.launchWebAuthFlow, controlling the redirecturi, and through the Promise returned, obtain the Auth code and gain access to the user's account at the service provider. This vulnerability affects Firefox 75...

PT-2020-19245

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 75 Description A malicious extension could exploit the issue by calling the browser.identity.launchWebAuthFlow function, controlling the redirect uri, and obtaining the Auth code through the returned Promise,...

CVE-2018-5113

The "browser.identity.launchWebAuthFlow" function of WebExtensions is only allowed to load content over "https:" but this requirement was not properly enforced. This can potentially allow privileged pages to be loaded by the extension. This vulnerability affects Firefox 58...

CVE-2018-5113

The "browser.identity.launchWebAuthFlow" function of WebExtensions is only allowed to load content over "https:" but this requirement was not properly enforced. This can potentially allow privileged pages to be loaded by the extension. This vulnerability affects Firefox 58...

CVE-2018-5113: Missing Authorization

The "browser.identity.launchWebAuthFlow" function of WebExtensions is only allowed to load content over "https:" but this requirement was not properly enforced. This can potentially allow privileged pages to be loaded by the extension. This vulnerability affects Firefox 58...

PT-2017-3678

Name of the Vulnerable Software and Affected Versions: Firefox versions prior to 58 Description: The issue is related to the browser.identity.launchWebAuthFlow function of WebExtensions, which is supposed to only load content over https:. However, this requirement was not properly enforced,...