| Package | Affected versions | Patched versions |
|---|---|---|
| firefox | < 59.0 | 59.0 |
A legacy extension's non-contentaccessible, defined resources can be loaded by an arbitrary web page through script. This script does this by using a maliciously crafted path string to reference the resources. Note: this vulnerability does not affect WebExtensions. This vulnerability affects Firefox < 59.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free