description: The "export" function in the Certificate Viewer can force local filesystem navigation when the "common name" in a certificate contains slashes, allowing certificate content to be saved in unsafe locations with an arbitrary filename. This vulnerability affects Firefox < 51.
problem types: Certificate Viewer exporting can be used to navigate and save to arbitrary filesystem locations
affected:
{
product: Firefox
vendor: Mozilla
versions:
lessThan: 51, status: affected, version: unspecified, versionType: custom
}