CVE-2018-5140

Image for moz-icons can be accessed through the "moz-icon:" protocol through script in web content even when otherwise prohibited

published June 11, 2018

CVSS
—
EPSS
1%
Percentile
69.7
In the wild
Unconfirmed
What it is

Image for moz-icons can be accessed through the "moz-icon:" protocol through script in web content even when otherwise prohibited. This could allow for information leakage of which applications are associated with specific MIME types by a malicious page. This vulnerability affects Firefox < 59.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01273 · 69.7th percentile
Published
2018-06-11T21:00Z
EPSS history
Timeline
  • 11 JUN 21:00Z
    Image for moz-icons can be accessed through the "moz-icon:" protocol through script in web content even when otherwise prohibited
    cvelistv5