Vulnerability Description
A same-origin policy violation allowing the theft of cross-origin URL entries when using a meta http-equiv="refresh" on a page to cause a redirection to another site using performance.getEntries(). This is a same-origin policy violation and could allow for data theft. This vulnerability affects Firefox < 62, Firefox ESR < 60.2, and Thunderbird < 60.2.1.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Mozilla | Firefox | < 62.0 |
| Mozilla | Firefox Esr | < 60.2 |
| Mozilla | Thunderbird | < 60.2.1 |
Related Weaknesses (CWE)
References
- https://bugzilla.mozilla.org/show_bug.cgi?id=1468523Issue TrackingPermissions RequiredVendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2018-20/Vendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2018-21/Vendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2018-25/Vendor Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=1468523Issue TrackingPermissions RequiredVendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2018-20/Vendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2018-21/Vendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2018-25/Vendor Advisory
FAQ
What is CVE-2018-18499?
CVE-2018-18499 is a vulnerability with a CVSS score of 6.5 (MEDIUM). A same-origin policy violation allowing the theft of cross-origin URL entries when using a meta http-equiv="refresh" on a page to cause a redirection to another site using performance.getEntries(). Th...
How severe is CVE-2018-18499?
CVE-2018-18499 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2018-18499?
Check the references section above for vendor advisories and patch information. Affected products include: Mozilla Firefox, Mozilla Firefox Esr, Mozilla Thunderbird.