CVE-2018-12358: Infoleak
Last updated 24 July 2024
Other sources
Service workers can use redirection to avoid the tainting of cross-origin resources in some instances, allowing a malicious site to read responses which are supposed to be opaque.
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2018-12358?
CVE-2018-12358 is considered a high severity vulnerability due to the potential risks associated with cross-origin resource reading.
How do I fix CVE-2018-12358?
To fix CVE-2018-12358, update your Mozilla Firefox to version 61 or later and ensure your Ubuntu Linux is updated to the latest patched version.
Which versions of Firefox are affected by CVE-2018-12358?
CVE-2018-12358 affects Firefox versions below 61.
Is Ubuntu 14.04 vulnerable to CVE-2018-12358?
Yes, Ubuntu 14.04 is vulnerable to CVE-2018-12358 if it runs an affected version of Firefox.
Can service workers exploit CVE-2018-12358?
Yes, malicious sites can exploit CVE-2018-12358 by using service workers to access opaque responses intended to be blocked.