vulnerability
Oracle Solaris 11: CVE-2018-12397: Vulnerability in Firefox
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 4 | (AV:L/AC:L/Au:N/C:P/I:P/A:N) | 2019-02-20 | 2019-02-20 | 2022-02-17 |
Severity
4
CVSS
(AV:L/AC:L/Au:N/C:P/I:P/A:N)
Published
2019-02-20
Added
2019-02-20
Modified
2022-02-17
Description
A WebExtension can request access to local files without the warning prompt stating that the extension will "Access your data for all websites" being displayed to the user. This allows extensions to run content scripts in local pages without permission warnings when a local file is opened. This vulnerability affects Firefox ESR
Solution(s)
oracle-solaris-11-4-upgrade-mail-thunderbird-68-6-0-11-4-21-0-1-69-0oracle-solaris-11-4-upgrade-mail-thunderbird-plugin-thunderbird-lightning-68-6-0-11-4-21-0-1-69-0oracle-solaris-11-4-upgrade-web-browser-firefox-60-5-0-11-4-6-0-1-4-0oracle-solaris-11-4-upgrade-web-data-firefox-bookmarks-60-5-0-11-4-6-0-1-4-0
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.