← Back to CVE List

CVE-2018-5113

Published: 2018-06-11T21:29Z
Last Modified: 2024-11-21T04:08Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
The "browser.identity.launchWebAuthFlow" function of WebExtensions is only allowed to load content over "https:" but this requirement was not properly enforced. This can potentially allow privileged pages to be loaded by the extension. This vulnerability affects Firefox < 58. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt