description: A legacy extension's non-contentaccessible, defined resources can be loaded by an arbitrary web page through script. This script does this by using a maliciously crafted path string to reference the resources. Note: this vulnerability does not affect WebExtensions. This vulnerability affects Firefox < 59.
problem types: Script content can access legacy extension non-contentaccessible resources
affected:
{
product: Firefox
vendor: Mozilla
versions:
lessThan: 59, status: affected, version: unspecified, versionType: custom
}