CVE-2018-5141: Input Validation
A vulnerability in the notifications Push API where notifications can be sent through service workers by web content without direct user interaction. This could be used to open new tabs in a denial of service (DOS) attack or to display unwanted content from arbitrary URLs to users.
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is CVE-2018-5141?
CVE-2018-5141 is a vulnerability in the notifications Push API where notifications can be sent through service workers by web content without direct user interaction.
What is the severity of CVE-2018-5141?
CVE-2018-5141 has a severity rating of 8.2 (High).
How does CVE-2018-5141 impact Mozilla Firefox?
CVE-2018-5141 affects Mozilla Firefox versions up to but excluding 59.0.
How can I fix CVE-2018-5141 on Ubuntu Linux?
To fix CVE-2018-5141 on Ubuntu Linux, update the Firefox package to version 59.0 or higher.
Where can I find more information about CVE-2018-5141?
You can find more information about CVE-2018-5141 at the following references: [Mozilla Bugzilla](https://bugzilla.mozilla.org/show_bug.cgi?id=1429093), [Mozilla Security Advisory](https://www.mozilla.org/en-US/security/advisories/mfsa2018-06/), [SecurityFocus](http://www.securityfocus.com/bid/103386).