description: Service workers can use redirection to avoid the tainting of cross-origin resources in some instances, allowing a malicious site to read responses which are supposed to be opaque. This vulnerability affects Firefox < 61.
problem types: Same-origin bypass using service worker and redirection
affected:
{
product: Firefox
vendor: Mozilla
versions:
lessThan: 61, status: affected, version: unspecified, versionType: custom
}