CVE-2018-5140 — Sensitive Information Exposure in Mozilla Firefox
Severity
5.3MEDIUMNVD
OSV8.8
EPSS
0.5%
top 36.17%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJun 11
Latest updateMay 14
Description
Image for moz-icons can be accessed through the "moz-icon:" protocol through script in web content even when otherwise prohibited. This could allow for information leakage of which applications are associated with specific MIME types by a malicious page. This vulnerability affects Firefox < 59.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NExploitability: 3.9 | Impact: 1.4
Affected Packages4 packages
Also affects: Ubuntu Linux 14.04, 16.04, 17.10
🔴Vulnerability Details
4GHSA▶
GHSA-59pv-2mx4-h324: Image for moz-icons can be accessed through the "moz-icon:" protocol through script in web content even when otherwise prohibited↗2022-05-14
OSV▶
CVE-2018-5140: Image for moz-icons can be accessed through the "moz-icon:" protocol through script in web content even when otherwise prohibited↗2018-03-14