Unrated severityNVD Advisory· Published Feb 28, 2019· Updated Aug 5, 2024
CVE-2018-18495
CVE-2018-18495
Description
WebExtension content scripts can be loaded into about: pages in some circumstances, in violation of the permissions granted to extensions. This could allow an extension to interfere with the loading and usage of these pages and use capabilities that were intended to be restricted from extensions. This vulnerability affects Firefox < 64.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4<64+ 1 more
- (no CPE)range: <64
- (no CPE)range: unspecified
- osv-coords2 versionspkg:rpm/opensuse/firefox-esr&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/MozillaFirefox&distro=openSUSE%20Tumbleweed
< 128.5.1-1.1+ 1 more
- (no CPE)range: < 128.5.1-1.1
- (no CPE)range: < 92.0-1.2
Patches
Vulnerability mechanics
References
4- usn.ubuntu.com/3844-1/mitrevendor-advisoryx_refsource_UBUNTU
- www.securityfocus.com/bid/106167mitrevdb-entryx_refsource_BID
- bugzilla.mozilla.org/show_bug.cgimitrex_refsource_CONFIRM
- www.mozilla.org/security/advisories/mfsa2018-29/mitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.