description: The "mozAddonManager" allows for the installation of extensions from the CDN for addons.mozilla.org, a publicly accessible site. This could allow malicious extensions to install additional extensions from the CDN in combination with an XSS attack on Mozilla AMO sites. This vulnerability affects Firefox < 51.
problem types: Remove addons.mozilla.org CDN from whitelist for mozAddonManager
affected:
{
product: Firefox
vendor: Mozilla
versions:
lessThan: 51, status: affected, version: unspecified, versionType: custom
}