CVE-2018-12400: Infoleak
In private browsing mode on Firefox for Android, favicons are cached in the cache/icons folder as they are in non-private mode. This allows information leakage of sites visited during private browsing sessions. Note: this issue only affects Firefox for Android. Desktop versions of Firefox are unaffected.. This vulnerability affects Firefox < 63.
Other sources
In private browsing mode on Firefox for Android, favicons are cached in the cache/icons folder as they are in non-private mode. This allows information leakage of sites visited during private browsing sessions. Note: this issue only affects Firefox for Android. Desktop versions of Firefox are unaffected.
— Mozilla
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is CVE-2018-12400?
CVE-2018-12400 is a vulnerability in Firefox for Android that allows information leakage of sites visited during private browsing sessions.
What is the severity of CVE-2018-12400?
CVE-2018-12400 has a severity rating of 5.3 (Medium).
Which versions of Firefox for Android are affected by CVE-2018-12400?
Firefox for Android versions up to, but not including, 63.0 are affected by CVE-2018-12400.
How can I fix CVE-2018-12400?
Update Firefox for Android to version 63.0 or higher to resolve CVE-2018-12400.
Where can I find more information about CVE-2018-12400?
You can find more information about CVE-2018-12400 in the following references: [Link1](https://bugzilla.mozilla.org/show_bug.cgi?id=1448305), [Link2](https://www.mozilla.org/en-US/security/advisories/mfsa2018-26/), [Link3](http://www.securityfocus.com/bid/105721).