← Back to CVE List

CVE-2018-5135

Published: 2018-06-11T21:29Z
Last Modified: 2024-11-21T04:08Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
WebExtensions can bypass normal restrictions in some circumstances and use "browser.tabs.executeScript" to inject scripts into contexts where this should not be allowed, such as pages from other WebExtensions or unprivileged "about:" pages. This vulnerability affects Firefox < 59. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt