CVE-2018-5105

WebExtensions can bypass user prompts to first save and then open an arbitrarily downloaded file

published June 11, 2018

CVSS
—
EPSS
0%
Percentile
34.7
In the wild
Unconfirmed
What it is

WebExtensions can bypass user prompts to first save and then open an arbitrarily downloaded file. This can result in an executable file running with local user privileges without explicit user consent. This vulnerability affects Firefox < 58.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00415 · 34.7th percentile
Published
2018-06-11T21:00Z
EPSS history
Timeline
  • 11 JUN 21:00Z
    WebExtensions can bypass user prompts to first save and then open an arbitrarily downloaded file
    cvelistv5