CVE-2018-18497
UNKNOWN
Published 2019-02-28T18:00:00
Actions:
No CVSS data available
Description
Limitations on the URIs allowed to WebExtensions by the browser.windows.create API can be bypassed when a pipe in the URL field is used within the extension to load multiple pages as a single argument. This could allow a malicious WebExtension to open privileged about: or file: locations. This vulnerability affects Firefox < 64.
Available Exploits
No exploits available for this CVE.
Related News
No news articles found for this CVE.
Affected Products
Affected Versions:
References
Published: 2019-02-28T18:00:00
Last Modified: 2024-08-05T11:08:21.995Z
Copied to clipboard!