---

CVE-2018-5181 - log back

CVE-2018-5181 created at 25 Sep 2019 19:31:40
Severity	+ Low
Remote	+ Local
Type	+ Access restriction bypass
Description	+ If a URL using the file: protocol is dragged and dropped onto an open tab of Firefox before 60.0 that is running in a different child process the tab will open a local file corresponding to the dropped URL, contrary to policy. One way to make the target tab open more reliably in a separate process is to open it with the noopener keyword.
References	+ https://www.mozilla.org/en-US/security/advisories/mfsa2018-11/#CVE-2018-5181 + https://bugzilla.mozilla.org/show_bug.cgi?id=1424107
Notes