CVE-2016-2817: Undefined Security Weakness

The WebExtension sandbox feature in browser/components/extensions/ext-tabs.js in Mozilla Firefox before 46.0 does not properly restrict principal inheritance during chrome.tabs.create and chrome.tabs.update API calls, which allows remote attackers to conduct Universal XSS UXSS attacks via a craft...

PT-2016-1815

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 46.0 Description The issue is related to the WebExtension sandbox feature in Mozilla Firefox, which does not properly restrict principal inheritance during API calls, specifically chrome.tabs.create and...