https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T14:05:27.131187+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2018-12397 CVE-2018-12397 2026-10-04T14:05:27.148192+00:00

Affected: Mozilla Firefox ESR, Mozilla Firefox

A WebExtension can request access to local files without the warning prompt stating that the extension will "Access your data for all websites" being displayed to the user. This allows extensions to run content scripts in local pages without permission warnings when a local file is opened. This vulnerability affects Firefox ESR < 60.3 and Firefox < 63.