CVE-2018-5137

Published: 2018-06-11T21:29Z

Last Modified: 2024-11-21T04:08Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

A legacy extension's non-contentaccessible, defined resources can be loaded by an arbitrary web page through script. This script does this by using a maliciously crafted path string to reference the resources. Note: this vulnerability does not affect WebExtensions. This vulnerability affects Firefox < 59. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt