CVE-2017-5393: XSS
The "mozAddonManager" allows for the installation of extensions from the CDN for addons.mozilla.org, a publicly accessible site. This could allow malicious extensions to install additional extensions from the CDN in combination with an XSS attack on Mozilla AMO sites. This vulnerability affects Firefox < 51.
Other sources
The mozAddonManager allows for the installation of extensions from the CDN for addons.mozilla.org, a publicly accessible site. This could allow malicious extensions to install additional extensions from the CDN in combination with an XSS attack on Mozilla AMO sites.
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2017-5375
- CVE-2017-5376
- CVE-2017-5377
- CVE-2017-5378
- CVE-2017-5379
- CVE-2017-5380
- CVE-2017-5390
- CVE-2017-5389
- CVE-2017-5396
- CVE-2017-5381
- CVE-2017-5382
- CVE-2017-5383
- CVE-2017-5384
- CVE-2017-5385
- CVE-2017-5386
- CVE-2017-5394
- CVE-2017-5391
- CVE-2017-5392
- CVE-2017-5393
- CVE-2017-5395
- CVE-2017-5387
- CVE-2017-5388
- CVE-2017-5374
- CVE-2017-5373
Frequently Asked Questions
What is the severity of CVE-2017-5393?
CVE-2017-5393 is classified as a moderate risk vulnerability that can allow the installation of malicious extensions.
How do I fix CVE-2017-5393?
To mitigate CVE-2017-5393, users should update their Mozilla Firefox to version 51 or higher.
What software is affected by CVE-2017-5393?
CVE-2017-5393 affects Mozilla Firefox versions prior to 51.
Can CVE-2017-5393 be exploited through an XSS attack?
Yes, CVE-2017-5393 can be exploited in combination with an XSS attack on Mozilla AMO sites.
What types of attacks can CVE-2017-5393 enable?
CVE-2017-5393 can enable the installation of additional malicious extensions without user consent.