| Package | Affected versions | Patched versions |
|---|---|---|
| firefox | ≤ 57.0.4 |
The "browser.identity.launchWebAuthFlow" function of WebExtensions is only allowed to load content over "https:" but this requirement was not properly enforced. This can potentially allow privileged pages to be loaded by the extension. This vulnerability affects Firefox < 58.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free