| Package | Affected versions | Patched versions |
|---|---|---|
| firefox | < 50.0 | 50.0 |
An issue where WebExtensions can use the mozAddonManager API to elevate privilege due to privileged pages being allowed in the permissions list. This allows a malicious extension to then install additional extensions without explicit user permission. This vulnerability affects Firefox < 50.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free