Lucene search

K
redhatcveRedhat.comRH:CVE-2018-5168
HistoryApr 01, 2020 - 7:59 p.m.

CVE-2018-5168

2020-04-0119:59:37
redhat.com
access.redhat.com
22

0.002 Low

EPSS

Percentile

52.6%

Sites can bypass security checks on permissions to install lightweight themes by manipulating the “baseURI” property of the theme element. This could allow a malicious site to install a theme without user interaction which could contain offensive or embarrassing images. This vulnerability affects Thunderbird < 52.8, Thunderbird ESR < 52.8, Firefox < 60, and Firefox ESR < 52.8.