CVE-2018-5168 vulnerability in Mozilla and Other Products
Published on June 11, 2018
Sites can bypass security checks on permissions to install lightweight themes by manipulating the "baseURI" property of the theme element. This could allow a malicious site to install a theme without user interaction which could contain offensive or embarrassing images. This vulnerability affects Thunderbird < 52.8, Thunderbird ESR < 52.8, Firefox < 60, and Firefox ESR < 52.8.
Vendor Advisory
Vendor Advisory
Vendor Advisory
Vendor Advisory
Vendor Advisory
Vendor Advisory
Vendor Advisory
Vendor Advisory
Vendor Advisory
Vendor Advisory
NVD
Products Associated with CVE-2018-5168
You can be notified by email with stack.watch whenever vulnerabilities like CVE-2018-5168 are published in these products:
Affected Versions
Mozilla Thunderbird:- Version unspecified and below 52.8 is affected.
- Version unspecified and below 52.8 is affected.
- Version unspecified and below 60 is affected.
- Version unspecified and below 52.8 is affected.
Exploit Probability
EPSS
1.03%
Percentile
77.28%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.