CVE-2018-12395 — Improper Access Control in Mozilla Firefox

CWE-284 — Improper Access Control8 documents8 sources
Severity
7.5HIGHNVD
EPSS
2.9%
top 13.60%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
8
Mozilla FirefoxMozilla Firefox ESRCanonical Ubuntu Linux+5 more
Timeline
PublishedFeb 28
Latest updateMay 13

Description

By rewriting the Host: request headers using the webRequest API, a WebExtension can bypass domain restrictions through domain fronting. This would allow access to domains that share a host that are otherwise restricted. This vulnerability affects Firefox ESR < 60.3 and Firefox < 63.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages7 packages

▶CVEListV5mozilla/firefoxunspecified — 63
▶NVDmozilla/firefox< 63.0
▶CVEListV5mozilla/firefox_esrunspecified — 60.3

Also affects: Debian Linux 8.0, 9.0, Ubuntu Linux 14.04, 16.04, 18.04, 18.10, Enterprise Linux 7.5

🔴Vulnerability Details

3
GHSA
GHSA-vw7x-c78h-8w2r: By rewriting the Host: request headers using the webRequest API, a WebExtension can bypass domain restrictions through domain fronting↗2022-05-13
▶
OSV
CVE-2018-12395: By rewriting the Host: request headers using the webRequest API, a WebExtension can bypass domain restrictions through domain fronting↗2019-02-28
▶
CVEList
CVE-2018-12395: By rewriting the Host: request headers using the webRequest API, a WebExtension can bypass domain restrictions through domain fronting↗2019-02-28
▶

📋Vendor Advisories

3
Ubuntu
Firefox vulnerabilities↗2018-10-24
▶
Red Hat
Mozilla: WebExtension bypass of domain restrictions through header rewriting↗2018-10-23
▶
Debian
CVE-2018-12395: firefox - By rewriting the Host: request headers using the webRequest API, a WebExtension ...↗2018
▶

💬Community

1
Bugzilla
CVE-2018-12395 Mozilla: WebExtension bypass of domain restrictions through header rewriting↗2018-10-23
▶
CVE-2018-12395 — Improper Access Control in Mozilla | cvebase