CVE-2018-18494 log
| Source |
|
| Severity | High |
| Remote | Yes |
| Type | Same-origin policy bypass |
| Description | A same-origin policy violation has been found in Firefox < 64.0, allowing the theft of cross-origin URL entries when using the Javascript location property to cause a redirection to another site using performance.getEntries(). |
| Group | Package | Affected | Fixed | Severity | Status | Ticket |
|---|---|---|---|---|---|---|
| AVG-833 | firefox | 63.0.3-1 | 64.0-1 | Critical | Fixed |
| Date | Advisory | Group | Package | Severity | Type |
|---|---|---|---|---|---|
| 12 Dec 2018 | ASA-201812-9 | AVG-833 | firefox | Critical | multiple issues |
| References |
|---|
https://www.mozilla.org/en-US/security/advisories/mfsa2018-29/#CVE-2018-18494 https://bugzilla.mozilla.org/show_bug.cgi?id=1487964 |