CVE-2018-5179

EPSS 0.35%
Veröffentlicht 26.04.2019 14:29:00
Zuletzt bearbeitet 21.11.2024 04:08:16
Quelle security@mozilla.org
Teams Watchlist Login
Unerledigt Login

A service worker can send the activate event on itself periodically which allows it to run perpetually, allowing it to monitor activity by users. Affects all versions prior to Firefox 60.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 4

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Mozilla ≫ Firefox Version < 60.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.35%	0.566

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.5	3.9	3.6	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N

CWE-772 Missing Release of Resource after Effective Lifetime

The product does not release a resource after its effective lifetime has ended, i.e., after the resource is no longer needed.

https://www.mozilla.org/en-US/security/advisories/mfsa2018-11/

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2018-5179

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2018-5179

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2018-5179

EUVD