CVE-2018-5152

Reference Links

• https://bugzilla.mozilla.org/show_bug.cgi?id=1415644
• https://bugzilla.mozilla.org/show_bug.cgi?id=1427289
• https://www.mozilla.org/security/advisories/mfsa2018-11/
• https://usn.ubuntu.com/3645-1/
• http://www.securityfocus.com/bid/104139
• http://www.securitytracker.com/id/1040896
• https://launchpad.net/bugs/cve/CVE-2018-5152
• https://www.mozilla.org/en-US/security/advisories/mfsa2018-11/
• https://www.mozilla.org/en-US/security/advisories/mfsa2018-11/#CVE-2018-5172
• https://www.mozilla.org/en-US/security/advisories/mfsa2018-11/#CVE-2018-5152
• https://security-tracker.debian.org/tracker/CVE-2018-5152
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5152
• https://nvd.nist.gov/vuln/detail/CVE-2018-5152
• https://ubuntu.com/security/CVE-2018-5152

Parent vulnerabilities

(Appears in the following advisories)

• MFSA2018-11

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2018-5154
• CVE-2018-5155
• CVE-2018-5157
• CVE-2018-5158
• CVE-2018-5159
• CVE-2018-5160
• CVE-2018-5152
• CVE-2018-5153
• CVE-2018-5163
• CVE-2018-5164
• CVE-2018-5166
• CVE-2018-5167
• CVE-2018-5168
• CVE-2018-5169
• CVE-2018-5172
• CVE-2018-5173
• CVE-2018-5174
• CVE-2018-5175
• CVE-2018-5176
• CVE-2018-5177
• CVE-2018-5165
• CVE-2018-5180
• CVE-2018-5181
• CVE-2018-5182
• CVE-2018-5179
• CVE-2018-5151
• CVE-2018-5150

Frequently Asked Questions

• What is CVE-2018-5152?

  CVE-2018-5152 is a vulnerability in WebExtensions that allows content scripts to intercept network traffic on Mozilla sites such as accounts.firefox.com.

• How can this vulnerability be exploited?

  This vulnerability can be exploited by malicious WebExtensions with the appropriate permissions to intercept login credentials, such as usernames and encrypted passwords, on websites like Firefox accounts.firefox.com.

• What is the severity level of CVE-2018-5152?

  The severity level of CVE-2018-5152 is medium, with a severity value of 6.5.

• Which software versions are affected by CVE-2018-5152?

  Mozilla Firefox versions up to and including 60.0 are affected by CVE-2018-5152.

• How can I mitigate the vulnerability CVE-2018-5152?

  To mitigate CVE-2018-5152, update Mozilla Firefox to version 60.0 or newer.