CVE-2018-12398

MEDIUM · CVSS 6.5 EPSS 1.62%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2019-02-28 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2018-12398

Severity

MEDIUM

CVSS

6.5

EPSS

1.62%

Chrome Firefox

Original NVD Description

By using the reflected URL in some special resource URIs, such as chrome:, it is possible to inject stylesheets and bypass Content Security Policy (CSP). This vulnerability affects Firefox < 63.