CVE-2018-18497

CVE-2018-18497 : In Firefox, limitations on URIs allowed to WebExtensions via the browser.windows.create API can be bypassed by placing a pipe in the URL field, causing multiple pages to load as a single argument. This may allow a malicious WebExtension to open privileged locations such as about:...

CVE-2018-18497: Undefined Security Weakness

Limitations on the URIs allowed to WebExtensions by the browser.windows.create API can be bypassed when a pipe in the URL field is used within the extension to load multiple pages as a single argument. This could allow a malicious WebExtension to open privileged about: or file: locations. This...

PT-2018-3358

Name of the Vulnerable Software and Affected Versions: Firefox versions prior to 64 Description: The issue is related to a bypass of limitations on URIs allowed to WebExtensions by the browser.windows.create API. This can occur when a pipe in the URL field is used within the extension to load...