Skip to content
Not rated

CVE-2018-5132 The Find API for WebExtensions can search some privileged pages, such as "about:debugging", if these pages are open in a…

Description

The Find API for WebExtensions can search some privileged pages, such as "about:debugging", if these pages are open in a tab. This could allow a malicious WebExtension to search for otherwise protected data if a user has it open. This vulnerability affects Firefox < 59.

Affected products and versions

Product Affected versions Fixed in
Firefox 59 earliest → < 59 59
The 2221 CVEs of Firefox →
Track this CVE