CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.3. It affects Firefox.
CVE
CVE-2017-5386
Severity
HIGH
CVSS
7.3
EPSS
2.27%
Firefox
Original NVD Description
WebExtension scripts can use the "data:" protocol to affect pages loaded by other web extensions using this protocol, leading to potential data disclosure or privilege escalation in affected extensions. This vulnerability affects Firefox ESR < 45.7 and Firefox < 51.
Related CVEs
Other vulnerabilities affecting the same vendor(s)