description: WebExtension scripts can use the "data:" protocol to affect pages loaded by other web extensions using this protocol, leading to potential data disclosure or privilege escalation in affected extensions. This vulnerability affects Firefox ESR < 45.7 and Firefox < 51.
problem types: WebExtensions can use data: protocol to affect other extensions
affected:
{
product: Firefox ESR
vendor: Mozilla
versions:
lessThan: 45.7, status: affected, version: unspecified, versionType: custom
}
{
product: Firefox
vendor: Mozilla
versions:
lessThan: 51, status: affected, version: unspecified, versionType: custom
}
