CVE-2018-5181 — Sensitive Information Exposure in Mozilla Firefox
Severity
7.5HIGHNVD
OSV9.8
EPSS
1.3%
top 20.55%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJun 11
Latest updateMay 14
Description
If a URL using the "file:" protocol is dragged and dropped onto an open tab that is running in a different child process the tab will open a local file corresponding to the dropped URL, contrary to policy. One way to make the target tab open more reliably in a separate process is to open it with the "noopener" keyword. This vulnerability affects Firefox < 60.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 3.9 | Impact: 3.6
Affected Packages4 packages
Also affects: Ubuntu Linux 14.04, 16.04, 17.10, 18.04
🔴Vulnerability Details
4GHSA▶
GHSA-2f9m-9655-mxcg: If a URL using the "file:" protocol is dragged and dropped onto an open tab that is running in a different child process the tab will open a local fil↗2022-05-14
OSV▶
CVE-2018-5181: If a URL using the "file:" protocol is dragged and dropped onto an open tab that is running in a different child process the tab will open a local fil↗2018-05-11
📋Vendor Advisories
4Red Hat
▶
Debian▶
CVE-2018-5181: firefox - If a URL using the "file:" protocol is dragged and dropped onto an open tab that...↗2018
💬Community
1Bugzilla▶
CVE-2018-5181 Mozilla: Local file can be displayed in noopener tab through drag and drop of hyperlink↗2018-05-09