CVE-2018-5135

WebExtensions can bypass normal restrictions in some circumstances and use "browser.tabs.executeScript" to inject scripts into contexts where this should not be allowed, such as pages from other WebExtensions or unprivileged "about:" pages. This vulnerability affects Firefox < 59.

• CWE-862

• http://www.securityfocus.com/bid/103386Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1040514Third Party Advisory, VDB Entry
• https://bugzilla.mozilla.org/show_bug.cgi?id=1431371Permissions Required
• https://usn.ubuntu.com/3596-1/Third Party Advisory
• https://www.mozilla.org/security/advisories/mfsa2018-06/Vendor Advisory
• http://www.securityfocus.com/bid/103386Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1040514Third Party Advisory, VDB Entry
• https://bugzilla.mozilla.org/show_bug.cgi?id=1431371Permissions Required
• https://usn.ubuntu.com/3596-1/Third Party Advisory
• https://www.mozilla.org/security/advisories/mfsa2018-06/Vendor Advisory

Published

Jun 11, 2018

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-5129A lack of parameter validation on IPC messages results in a …
• CVE-2018-5130When packets with a mismatched RTP payload type are sent in …
• CVE-2018-5131Under certain circumstances the "fetch()" API can return tra…
• CVE-2018-5132The Find API for WebExtensions can search some privileged pa…
• CVE-2018-5133If the "app.support.baseURL" preference is changed by a mali…
• CVE-2018-5134WebExtensions may use "view-source:" URLs to view local "fil…
• CVE-2018-5136A shared worker created from a "data:" URL in one tab can be…
• CVE-2018-5137A legacy extension's non-contentaccessible, defined resource…
• CVE-2018-5138A spoofing vulnerability can occur when a malicious site wit…
• CVE-2018-5140Image for moz-icons can be accessed through the "moz-icon:" …
• CVE-2018-5141A vulnerability in the notifications Push API where notifica…
• CVE-2018-5142If Media Capture and Streams API permission is requested fro…