CVE-2018-5108: Infoleak
A Blob URL can violate origin attribute segregation, allowing it to be accessed from a private browsing tab and for data to be passed between the private browsing tab and a normal tab. This could allow for the leaking of private information specific to the private browsing context. This issue is mitigated by the requirement that the user enter the Blob URL manually in order for the access violation to occur.
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2018-5091
- CVE-2018-5092
- CVE-2018-5093
- CVE-2018-5094
- CVE-2018-5095
- CVE-2018-5097
- CVE-2018-5098
- CVE-2018-5099
- CVE-2018-5100
- CVE-2018-5101
- CVE-2018-5102
- CVE-2018-5103
- CVE-2018-5104
- CVE-2018-5105
- CVE-2018-5106
- CVE-2018-5107
- CVE-2018-5108
- CVE-2018-5109
- CVE-2018-5110
- CVE-2018-5111
- CVE-2018-5112
- CVE-2018-5113
- CVE-2018-5114
- CVE-2018-5115
- CVE-2018-5116
- CVE-2018-5117
- CVE-2018-5118
- CVE-2018-5119
- CVE-2018-5121
- CVE-2018-5122
- CVE-2018-5090
- CVE-2018-5089
Frequently Asked Questions
What is CVE-2018-5108?
CVE-2018-5108 is a vulnerability that allows a Blob URL to violate origin attribute segregation, potentially leading to the leaking of private information from a private browsing context.
How does CVE-2018-5108 affect Mozilla Firefox?
Mozilla Firefox versions up to 58 are affected by CVE-2018-5108. Users should update to version 59.0.1 or later to fix the vulnerability.
How can I fix CVE-2018-5108 on Ubuntu?
If you are using Ubuntu, you should update your Firefox package to version 59.0.1 or later to address CVE-2018-5108.
What is the severity of CVE-2018-5108?
CVE-2018-5108 has a severity rating of medium (4) according to the Common Vulnerability Scoring System (CVSS).
Where can I find more information about CVE-2018-5108?
You can find more information about CVE-2018-5108 on the Mozilla Bugzilla and Mozilla Security Advisories websites.