CVE-2018-5112

Development Tools panels of an extension are required to load URLs for the panels as relative URLs from the extension manifest file but this requirement was not enforced in all instances. This could allow the development tools panel for the extension to load a URL that it should not be able to access, including potentially privileged pages. This vulnerability affects Firefox < 58.

Development Tools panels of an extension are required to load URLs for the panels as relative URLs from the extension manifest file but this requirement was not enforced in all instances. This could allow the development tools panel for the extension to load a URL that it should not be able to access, including potentially privileged pages. This vulnerability affects Firefox < 58.

Los paneles de las herramientas de desarrollo de una extensión son necesarios para cargar URL para los paneles como URL relativas desde el archivo manifest de la extensión, pero este requisito no se cumple en todas las instancias. Esto podría permitir que el panel de herramientas de desarrollo para la extensión cargue una URL a la que no se debería tener acceso, incluyendo páginas potencialmente privilegiadas. Esta vulnerabilidad afecta a las versiones anteriores a la 58 de Firefox.