CVE-2018-5179

EPSS 0.35%
Published 26.04.2019 14:29:00
Last modified 21.11.2024 04:08:16
Source security@mozilla.org
Teams watchlist Login
Open Login

A service worker can send the activate event on itself periodically which allows it to run perpetually, allowing it to monitor activity by users. Affects all versions prior to Firefox 60.

Affected products Warnungen 0 Metrics 3 CWE 1 References 4

Data is provided by the National Vulnerability Database (NVD)

Mozilla ≫ Firefox Version < 60.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.35%	0.566

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.5	3.9	3.6	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N

CWE-772 Missing Release of Resource after Effective Lifetime

The product does not release a resource after its effective lifetime has ended, i.e., after the resource is no longer needed.

https://www.mozilla.org/en-US/security/advisories/mfsa2018-11/

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2018-5179

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2018-5179

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2018-5179

EUVD