vulnerability
Alpine Linux: CVE-2018-12396: WebExtension content scripts can execute in disallowed
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 4 | (AV:N/AC:M/Au:N/C:N/I:P/A:N) | Feb 28, 2019 | Apr 16, 2019 | Dec 27, 2019 |
Severity
4
CVSS
(AV:N/AC:M/Au:N/C:N/I:P/A:N)
Published
Feb 28, 2019
Added
Apr 16, 2019
Modified
Dec 27, 2019
Description
A vulnerability where a WebExtension can run content scripts in disallowed contexts following navigation or other events. This allows for potential privilege escalation by the WebExtension on sites where content scripts should not be run. This vulnerability affects Firefox ESR
Solution
alpine-linux-upgrade-firefox-esr
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.