description: Same-origin protections for the PDF viewer can be bypassed, allowing a malicious site to intercept messages meant for the viewer. This could allow the site to retrieve PDF files restricted to viewing by an authenticated user on a third-party website. This vulnerability affects Firefox ESR < 52.8 and Firefox < 60.
problem types: Same-origin bypass of PDF Viewer to view protected PDF files
affected:
{
product: Firefox ESR
vendor: Mozilla
versions:
lessThan: 52.8, status: affected, version: unspecified, versionType: custom
}
{
product: Firefox
vendor: Mozilla
versions:
lessThan: 60, status: affected, version: unspecified, versionType: custom
}
