description: The Developer Tools feature suffers from a XUL injection vulnerability due to improper sanitization of the web page source code. In the worst case, this could allow arbitrary code execution when opening a malicious page with the style editor tool. This vulnerability affects Firefox ESR < 52.3 and Firefox < 55.
problem types: XUL injection in the style editor in devtools
affected:
{
product: Firefox ESR
vendor: Mozilla
versions:
lessThan: 52.3, status: affected, version: unspecified, versionType: custom
}
{
product: Firefox
vendor: Mozilla
versions:
lessThan: 55, status: affected, version: unspecified, versionType: custom
}
