CWE Code: 862
Vulnerability Type: privilege_escalation
CVSS Score: 5.0
CWE Name:  Missing Authorization
Summary: webextensions can bypass normal restrictions in some circumstances and use "browser.tabs.executescript" to inject scripts into contexts where this should not be allowed, such as pages from other webextensions or unprivileged "about:" pages. this vulnerability affects firefox < 59.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): NONE/PARTIAL/NONE
Published Date: 2018-06-11
Last Modified Date: 2019-10-03
You are a cybersecurity expert assistant. Provide detailed information about vulnerabilities in a clear and structured format.
system
Please provide details about this vulnerability:  Missing Authorization.
user
CWE Code: 862
Vulnerability Type: privilege_escalation
CVSS Score: 5.0
CWE Name:  Missing Authorization
Summary: webextensions can bypass normal restrictions in some circumstances and use "browser.tabs.executescript" to inject scripts into contexts where this should not be allowed, such as pages from other webextensions or unprivileged "about:" pages. this vulnerability affects firefox < 59.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): NONE/PARTIAL/NONE
Published Date: 2018-06-11
Last Modified Date: 2019-10-03
assistant