CVE-2018-5112

HIGH 7.5CVE-2018-5112 · Published 11/06/2018 · updated 17/06/2026

In short

CVE-2018-5112 is a HIGH (CVSS 7.5) vulnerability affecting firefox (mozilla).
Chance of exploitation in the next 30 days (EPSS): 1.9%, higher than 80.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
firefox mozilla	`≤ 57.0.4`	No fix yet

Description

Development Tools panels of an extension are required to load URLs for the panels as relative URLs from the extension manifest file but this requirement was not enforced in all instances. This could allow the development tools panel for the extension to load a URL that it should not be able to access, including potentially privileged pages. This vulnerability affects Firefox < 58.

References

securityfocus.com/bid/102786 · Third Party Advisory
securitytracker.com/id/1040270 · Third Party Advisory
bugzilla.mozilla.org/show_bug.cgi · Issue Tracking
usn.ubuntu.com/3544-1 · Third Party Advisory
mozilla.org/security/advisories/mfsa2018-02 · Vendor Advisory

More vulnerabilities in firefox

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

firefox

mozilla

≤ 57.0.4

No fix yet

Description

More vulnerabilities in firefox

See all →