CWE Code: 862
Vulnerability Type: privilege_escalation
CVSS Score: 5.0
CWE Name:  Missing Authorization
Summary: webextensions can bypass normal restrictions in some circumstances and use "browser.tabs.executescript" to inject scripts into contexts where this should not be allowed, such as pages from other webextensions or unprivileged "about:" pages. this vulnerability affects firefox < 59.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): NONE/PARTIAL/NONE
Published Date: 2018-06-11
Last Modified Date: 2019-10-03