description: Given an installed malicious file picker application, an attacker was able to steal and upload local files of their choosing, regardless of the actually files picked. *Note: This issue only affected Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox ESR < 68.11.
problem types: Exfiltrating local files through malicious file picker application
affected:
{
product: Firefox ESR
vendor: Mozilla
versions:
lessThan: 68.11, status: affected, version: unspecified, versionType: custom
}