CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.5. It affects Windows, Firefox.
CVE
CVE-2018-18497
Severity
MEDIUM
CVSS
6.5
EPSS
1.42%
Windows Firefox
Original NVD Description
Limitations on the URIs allowed to WebExtensions by the browser.windows.create API can be bypassed when a pipe in the URL field is used within the extension to load multiple pages as a single argument. This could allow a malicious WebExtension to open privileged about: or file: locations. This vulnerability affects Firefox < 64.
Related CVEs
Other vulnerabilities affecting the same vendor(s)