CVE-2018-5115
- State
- Published
- Severity
- Not scored
- Published
- Jun 11, 2018
- Updated
- Aug 5, 2024
- Reserved
- Jan 3, 2018
Description
If an HTTP authentication prompt is triggered by a background network request from a page or extension, it is displayed over the currently loaded foreground page. Although the prompt contains the real domain making the request, this can result in user confusion about the originating site of the authentication request and may cause users to mistakenly send private credential information to a third party site. This vulnerability affects Firefox < 58.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
FirefoxMozilla |
|
References
- 1040270vdb-entry
- https://bugzilla.mozilla.org/show_bug.cgi?id=1409449
- USN-3544-1vendor-advisory
- 102786vdb-entry
- https://www.mozilla.org/security/advisories/mfsa2018-02/
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.