Every CVE Search/ Get API key

CVE-2018-18499

A same-origin policy violation allowing the theft of cross-origin URL entries when using a meta...

6.5 MediumFix available

A same-origin policy violation allowing the theft of cross-origin URL entries when using a meta http-equiv="refresh" on a page to cause a redirection to another site using performance.getEntries(). This is a same-origin policy violation and could allow for data theft. This vulnerability affects Firefox < 62, Firefox ESR < 60.2, and Thunderbird < 60.2.1.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
High
Integrity
None
Availability
None

Exploit likelihood

1.09%Up 0.1 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 6.5

A same-origin policy violation allowing the theft of cross-origin URL entries when using a meta http-equiv="refresh" on a page to cause a redirection to another site using performance.getEntries(). This is a same-origin policy violation and could allow for data theft. This vulnerability affects Firefox < 62, Firefox ESR < 60.2, and Thunderbird < 60.2.1.

Record
CVE-2018-18499
CVSS 3.0
6.5 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:P/I:N/A:N
Weakness
CWE-346
Updated
2026-11-02
CVE List No score

A same-origin policy violation allowing the theft of cross-origin URL entries when using a meta http-equiv="refresh" on a page to cause a redirection to another site using performance.getEntries(). This is a same-origin policy violation and could allow for data theft. This vulnerability affects Firefox < 62, Firefox ESR < 60.2, and Thunderbird < 60.2.1.

Record
CVE-2018-18499
Updated
2026-11-02
EUVDEUVD-2018-10224 No score

A same-origin policy violation allowing the theft of cross-origin URL entries when using a meta http-equiv="refresh" on a page to cause a redirection to another site using performance.getEntries(). This is a same-origin policy violation and could allow for data theft. This vulnerability affects Firefox < 62, Firefox ESR < 60.2, and Thunderbird < 60.2.1.

Record
EUVD-2018-10224
Updated
2026-11-03
GitHub AdvisoriesGHSA-h7hh-7f6j-x9mh 6.5

A same-origin policy violation allowing the theft of cross-origin URL entries when using a meta...

A same-origin policy violation allowing the theft of cross-origin URL entries when using a meta http-equiv="refresh" on a page to cause a redirection to another site using performance.getEntries(). This is a same-origin policy violation and could allow for data theft. This vulnerability affects Firefox < 62, Firefox ESR < 60.2, and Thunderbird < 60.2.1.

Record
GHSA-h7hh-7f6j-x9mh
CVSS 3.0
6.5 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Weakness
CWE-346
Updated
2026-11-02
OSV 6.5

A same-origin policy violation allowing the theft of cross-origin URL entries when using a meta http-equiv="refresh" on a page to cause a redirection to another site using performance.getEntries(). This is a same-origin policy violation and could allow for data theft. This vulnerability affects Firefox < 62, Firefox ESR < 60.2, and Thunderbird < 60.2.1.

Record
CVE-2018-18499
CVSS 3.0
6.5 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVDEBIAN-CVE-2018-18499 6.5

A same-origin policy violation allowing the theft of cross-origin URL entries when using a meta http-equiv="refresh" on a page to cause a redirection to another site using performance.getEntries(). This is a same-origin policy violation and could allow for data theft. This vulnerability affects Firefox < 62, Firefox ESR < 60.2, and Thunderbird < 60.2.1.

Record
DEBIAN-CVE-2018-18499
CVSS 3.0
6.5 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Updated
2026-11-02
Show 5 moreShow less
OSVRHSA-2018:2692 9.8

Red Hat Security Advisory: firefox security update

Record
RHSA-2018:2692
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2018:2693 9.8

Red Hat Security Advisory: firefox security update

Record
RHSA-2018:2693
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2018:3403 9.8

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2018:3403
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2018:3458 9.8

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2018:3458
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2018-18499 6.5

A same-origin policy violation allowing the theft of cross-origin URL entries when using a meta http-equiv="refresh" on a page to cause a redirection to another site using performance.getEntries(). This is a same-origin policy violation and could allow for data theft. This vulnerability affects Firefox < 62, Firefox ESR < 60.2, and Thunderbird < 60.2.1.

Record
UBUNTU-CVE-2018-18499
CVSS 3.0
6.5 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
firefox-esr
Debian:12
 before 60.2.0esr-1
60.2.0esr-1
firefox-esr
Debian:13
 before 60.2.0esr-1
60.2.0esr-1
firefox-esr
Debian:14
 before 60.2.0esr-1
60.2.0esr-1
thunderbird
Debian:12
 before 1:60.2.1-1
1:60.2.1-1
thunderbird
Debian:13
 before 1:60.2.1-1
1:60.2.1-1
thunderbird
Debian:14
 before 1:60.2.1-1
1:60.2.1-1
firefox-esr
Debian:8
From an advisory covering 8 CVEs
 before 60.3.0esr-1~deb8u1, plus listed versions
45.0.1esr-145.0.2esr-145.0esr-145.0esr-245.1.0esr-1
Show 45 moreShow less
45.1.1esr-145.2.0esr-145.2.0esr-1~deb7u145.2.0esr-1~deb8u145.3.0esr-145.3.0esr-1~deb7u145.3.0esr-1~deb8u145.3.0esr-245.4.0esr-145.4.0esr-1~deb7u145.4.0esr-1~deb7u245.4.0esr-1~deb8u145.4.0esr-1~deb8u245.4.0esr-245.5.0esr-145.5.0esr-1~deb8u145.5.1esr-145.5.1esr-1~deb7u145.5.1esr-1~deb8u145.6.0esr-145.6.0esr-1~deb7u145.6.0esr-1~deb8u145.7.0esr-145.7.0esr-1~deb7u145.7.0esr-1~deb8u145.7.0esr-245.7.0esr-345.7.0esr-445.8.0esr-145.8.0esr-1~deb7u145.8.0esr-1~deb8u145.9.0esr-145.9.0esr-1~deb7u145.9.0esr-1~deb8u152.0.1esr-152.0.2esr-152.0esr-152.1.0esr-152.2.0esr-152.2.0esr-1~deb7u152.2.0esr-1~deb8u152.2.0esr-1~deb9u152.2.0esr-252.3.0esr-152.3.0esr-1~deb7u1
60.3.0esr-1~deb8u1
thunderbird
Debian:8
From an advisory covering 17 CVEs
 before 1:60.3.0-1~deb8u1, plus listed versions
1.5-41.5.0.2-11.5.0.2-21.5.0.2-31.5.0.4-1
Show 45 moreShow less
1.5.0.4-21.5.0.4-31.5.0.5-11.5.0.7-11.5.0.7-21:52.4.0-11:52.4.0-1~deb7u11:52.4.0-1~deb8u11:52.4.0-1~deb9u11:52.4.0-2~exp11:52.5.0-11:52.5.0-1~deb7u11:52.5.0-1~deb8u11:52.5.0-1~deb9u11:52.5.2-11:52.5.2-1~deb7u11:52.5.2-21:52.5.2-2~deb8u11:52.5.2-2~deb9u11:52.6.0-11:52.6.0-1+alpha.11:52.6.0-1+alpha.21:52.6.0-1~deb7u11:52.6.0-1~deb8u11:52.6.0-1~deb9u11:52.7.0-11:52.7.0-1~deb7u11:52.7.0-1~deb8u11:52.7.0-1~deb9u11:52.8.0-11:52.8.0-1~deb7u11:52.8.0-1~deb8u11:52.8.0-1~deb9u11:52.9.0-11:52.9.1-11:52.9.1-1~deb8u11:52.9.1-1~deb9u11:58.0~b3-11:60.0-11:60.0-21:60.0-2~deb9u11:60.0-31:60.0-3~deb9u11:60.0~b10-11:60.0~b2-1
1:60.3.0-1~deb8u1
firefox-esr
Debian:9
From an advisory covering 4 CVEs
 before 60.2.0esr-1~deb9u2, plus listed versions
45.9.0esr-152.0.1esr-152.0.2esr-152.0esr-152.1.0esr-1
Show 45 moreShow less
52.2.0esr-152.2.0esr-1~deb7u152.2.0esr-1~deb8u152.2.0esr-1~deb9u152.2.0esr-252.3.0esr-152.3.0esr-1~deb7u152.3.0esr-1~deb8u152.3.0esr-1~deb8u252.3.0esr-1~deb9u152.3.0esr-252.4.0esr-1~deb8u152.4.0esr-1~deb9u152.4.0esr-252.4.0esr-2~deb7u152.5.0esr-152.5.0esr-1~deb7u152.5.0esr-1~deb8u152.5.0esr-1~deb9u152.5.2esr-152.5.2esr-1~deb7u152.5.2esr-1~deb8u152.5.2esr-1~deb9u152.5.3esr-152.6.0esr-152.6.0esr-1~deb7u152.6.0esr-1~deb8u152.6.0esr-1~deb9u152.6.0esr-252.6.0esr-2+alpha.152.6.0esr-2+alpha.252.7.0esr-152.7.0esr-1~deb8u152.7.0esr-1~deb9u152.7.1esr-152.7.1esr-1~deb7u152.7.1esr-1~deb8u152.7.1esr-1~deb9u152.7.2esr-152.7.2esr-1~deb7u152.7.2esr-1~deb8u152.7.2esr-1~deb9u152.7.3esr-152.7.3esr-1~deb7u152.7.3esr-1~deb8u1
60.2.0esr-1~deb9u2
thunderbird
Debian:9
From an advisory covering 8 CVEs
 before 1:60.2.1-2~deb9u1, plus listed versions
1.5-41.5.0.2-11.5.0.2-21.5.0.2-31.5.0.4-1
Show 45 moreShow less
1.5.0.4-21.5.0.4-31.5.0.5-11.5.0.7-11.5.0.7-21:52.4.0-11:52.4.0-1~deb7u11:52.4.0-1~deb8u11:52.4.0-1~deb9u11:52.4.0-2~exp11:52.5.0-11:52.5.0-1~deb7u11:52.5.0-1~deb8u11:52.5.0-1~deb9u11:52.5.2-11:52.5.2-1~deb7u11:52.5.2-21:52.5.2-2~deb8u11:52.5.2-2~deb9u11:52.6.0-11:52.6.0-1+alpha.11:52.6.0-1+alpha.21:52.6.0-1~deb7u11:52.6.0-1~deb8u11:52.6.0-1~deb9u11:52.7.0-11:52.7.0-1~deb7u11:52.7.0-1~deb8u11:52.7.0-1~deb9u11:52.8.0-11:52.8.0-1~deb7u11:52.8.0-1~deb8u11:52.8.0-1~deb9u11:52.9.0-11:52.9.1-11:52.9.1-1~deb8u11:52.9.1-1~deb9u11:58.0~b3-11:60.0-11:60.0-21:60.0-2~deb9u11:60.0-31:60.0-3~deb9u11:60.0~b10-11:60.0~b2-1
1:60.2.1-2~deb9u1
Show 33 moreShow less
Affected packages
PackageAffectedFixed
firefox
Red Hat:enterprise_linux:7::client
From an advisory covering 6 CVEs
 before 0:60.2.0-1.el7_5
0:60.2.0-1.el7_5
firefox-debuginfo
Red Hat:enterprise_linux:7::client
From an advisory covering 6 CVEs
 before 0:60.2.0-1.el7_5
0:60.2.0-1.el7_5
firefox
Red Hat:enterprise_linux:7::server
From an advisory covering 6 CVEs
 before 0:60.2.0-1.el7_5
0:60.2.0-1.el7_5
firefox-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 6 CVEs
 before 0:60.2.0-1.el7_5
0:60.2.0-1.el7_5
firefox
Red Hat:enterprise_linux:7::workstation
From an advisory covering 6 CVEs
 before 0:60.2.0-1.el7_5
0:60.2.0-1.el7_5
firefox-debuginfo
Red Hat:enterprise_linux:7::workstation
From an advisory covering 6 CVEs
 before 0:60.2.0-1.el7_5
0:60.2.0-1.el7_5
firefox
Red Hat:enterprise_linux:6::client
From an advisory covering 6 CVEs
 before 0:60.2.0-1.el6
0:60.2.0-1.el6
firefox-debuginfo
Red Hat:enterprise_linux:6::client
From an advisory covering 6 CVEs
 before 0:60.2.0-1.el6
0:60.2.0-1.el6
firefox
Red Hat:enterprise_linux:6::computenode
From an advisory covering 6 CVEs
 before 0:60.2.0-1.el6
0:60.2.0-1.el6
firefox-debuginfo
Red Hat:enterprise_linux:6::computenode
From an advisory covering 6 CVEs
 before 0:60.2.0-1.el6
0:60.2.0-1.el6
firefox
Red Hat:enterprise_linux:6::server
From an advisory covering 6 CVEs
 before 0:60.2.0-1.el6
0:60.2.0-1.el6
firefox-debuginfo
Red Hat:enterprise_linux:6::server
From an advisory covering 6 CVEs
 before 0:60.2.0-1.el6
0:60.2.0-1.el6
firefox
Red Hat:enterprise_linux:6::workstation
From an advisory covering 6 CVEs
 before 0:60.2.0-1.el6
0:60.2.0-1.el6
firefox-debuginfo
Red Hat:enterprise_linux:6::workstation
From an advisory covering 6 CVEs
 before 0:60.2.0-1.el6
0:60.2.0-1.el6
thunderbird
Red Hat:enterprise_linux:6::client
From an advisory covering 8 CVEs
 before 0:60.2.1-5.el6
0:60.2.1-5.el6
thunderbird-debuginfo
Red Hat:enterprise_linux:6::client
From an advisory covering 8 CVEs
 before 0:60.2.1-5.el6
0:60.2.1-5.el6
thunderbird
Red Hat:enterprise_linux:6::server
From an advisory covering 8 CVEs
 before 0:60.2.1-5.el6
0:60.2.1-5.el6
thunderbird-debuginfo
Red Hat:enterprise_linux:6::server
From an advisory covering 8 CVEs
 before 0:60.2.1-5.el6
0:60.2.1-5.el6
thunderbird
Red Hat:enterprise_linux:6::workstation
From an advisory covering 8 CVEs
 before 0:60.2.1-5.el6
0:60.2.1-5.el6
thunderbird-debuginfo
Red Hat:enterprise_linux:6::workstation
From an advisory covering 8 CVEs
 before 0:60.2.1-5.el6
0:60.2.1-5.el6
thunderbird
Red Hat:enterprise_linux:7::client
From an advisory covering 8 CVEs
 before 0:60.2.1-4.el7_5
0:60.2.1-4.el7_5
thunderbird-debuginfo
Red Hat:enterprise_linux:7::client
From an advisory covering 8 CVEs
 before 0:60.2.1-4.el7_5
0:60.2.1-4.el7_5
thunderbird
Red Hat:enterprise_linux:7::server
From an advisory covering 8 CVEs
 before 0:60.2.1-4.el7_5
0:60.2.1-4.el7_5
thunderbird-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 8 CVEs
 before 0:60.2.1-4.el7_5
0:60.2.1-4.el7_5
thunderbird
Red Hat:enterprise_linux:7::workstation
From an advisory covering 8 CVEs
 before 0:60.2.1-4.el7_5
0:60.2.1-4.el7_5
thunderbird-debuginfo
Red Hat:enterprise_linux:7::workstation
From an advisory covering 8 CVEs
 before 0:60.2.1-4.el7_5
0:60.2.1-4.el7_5
thunderbird
Ubuntu:14.04:LTS
 before 1:60.2.1+build1-0ubuntu0.14.04.2, plus listed versions
1:24.0+build1-0ubuntu11:24.0+build1-0ubuntu21:24.1.1+build1-0ubuntu0.13.10.11:24.1.1+build1-0ubuntu11:24.2.0+build1-0ubuntu1
Show 35 moreShow less
1:24.4.0+build1-0ubuntu11:24.5.0+build1-0ubuntu0.14.04.11:24.6.0+build1-0ubuntu0.14.04.11:31.0+build1-0ubuntu0.14.04.11:31.1.1+build1-0ubuntu0.14.04.11:31.1.2+build1-0ubuntu0.14.04.11:31.2.0+build2-0ubuntu0.14.04.11:31.3.0+build1-0ubuntu0.14.04.11:31.4.0+build1-0ubuntu0.14.04.11:31.5.0+build1-0ubuntu0.14.04.11:31.6.0+build1-0ubuntu0.14.04.11:31.7.0+build1-0ubuntu0.14.04.11:31.8.0+build1-0ubuntu0.14.04.11:38.2.0+build1-0ubuntu0.14.04.11:38.3.0+build1-0ubuntu0.14.04.11:38.4.0+build3-0ubuntu0.14.04.11:38.5.1+build2-0ubuntu0.14.04.11:38.6.0+build1-0ubuntu0.14.04.11:38.7.2+build1-0ubuntu0.14.04.11:38.8.0+build1-0ubuntu0.14.04.11:45.2.0+build1-0ubuntu0.14.04.31:45.3.0+build1-0ubuntu0.14.04.41:45.4.0+build1-0ubuntu0.14.04.11:45.5.1+build1-0ubuntu0.14.04.11:45.7.0+build1-0ubuntu0.14.04.11:45.8.0+build1-0ubuntu0.14.04.11:52.1.1+build1-0ubuntu0.14.04.11:52.2.1+build1-0ubuntu0.14.04.11:52.3.0+build1-0ubuntu0.14.04.11:52.4.0+build1-0ubuntu0.14.04.21:52.5.0+build1-0ubuntu0.14.04.11:52.6.0+build1-0ubuntu0.14.04.11:52.7.0+build1-0ubuntu0.14.04.11:52.8.0+build1-0ubuntu0.14.04.11:52.9.1+build3-0ubuntu0.14.04.1
1:60.2.1+build1-0ubuntu0.14.04.2
firefox
Ubuntu:16.04:LTS
 before 62.0+build2-0ubuntu0.16.04.3, plus listed versions
41.0.2+build2-0ubuntu142.0+build2-0ubuntu144.0+build3-0ubuntu244.0.1+build1-0ubuntu144.0.2+build1-0ubuntu1
Show 42 moreShow less
45.0+build2-0ubuntu145.0.1+build1-0ubuntu145.0.2+build1-0ubuntu146.0+build5-0ubuntu0.16.04.246.0.1+build1-0ubuntu0.16.04.247.0+build3-0ubuntu0.16.04.148.0+build2-0ubuntu0.16.04.149.0+build4-0ubuntu0.16.04.149.0.2+build2-0ubuntu0.16.04.250.0+build2-0ubuntu0.16.04.250.0.2+build1-0ubuntu0.16.04.150.1.0+build2-0ubuntu0.16.04.151.0.1+build2-0ubuntu0.16.04.151.0.1+build2-0ubuntu0.16.04.252.0+build2-0ubuntu0.16.04.152.0.1+build2-0ubuntu0.16.04.152.0.2+build1-0ubuntu0.16.04.153.0+build6-0ubuntu0.16.04.153.0.2+build1-0ubuntu0.16.04.253.0.3+build1-0ubuntu0.16.04.254.0+build3-0ubuntu0.16.04.155.0.1+build2-0ubuntu0.16.04.255.0.2+build1-0ubuntu0.16.04.156.0+build6-0ubuntu0.16.04.156.0+build6-0ubuntu0.16.04.257.0+build4-0ubuntu0.16.04.557.0+build4-0ubuntu0.16.04.657.0.1+build2-0ubuntu0.16.04.157.0.3+build1-0ubuntu0.16.04.157.0.4+build1-0ubuntu0.16.04.158.0+build6-0ubuntu0.16.04.158.0.1+build1-0ubuntu0.16.04.158.0.2+build1-0ubuntu0.16.04.159.0+build5-0ubuntu0.16.04.159.0.1+build1-0ubuntu0.16.04.159.0.2+build1-0ubuntu0.16.04.159.0.2+build1-0ubuntu0.16.04.360.0+build2-0ubuntu0.16.04.160.0.1+build2-0ubuntu0.16.04.160.0.2+build1-0ubuntu0.16.04.161.0+build3-0ubuntu0.16.04.261.0.1+build1-0ubuntu0.16.04.1
62.0+build2-0ubuntu0.16.04.3
thunderbird
Ubuntu:16.04:LTS
 before 1:60.2.1+build1-0ubuntu0.16.04.4, plus listed versions
1:38.3.0+build1-0ubuntu21:38.5.1+build2-0ubuntu11:38.6.0+build1-0ubuntu11:38.7.2+build1-0ubuntu0.16.04.11:38.8.0+build1-0ubuntu0.16.04.1
Show 15 moreShow less
1:45.2.0+build1-0ubuntu0.16.04.11:45.3.0+build1-0ubuntu0.16.04.21:45.4.0+build1-0ubuntu0.16.04.11:45.5.1+build1-0ubuntu0.16.04.11:45.7.0+build1-0ubuntu0.16.04.11:45.8.0+build1-0ubuntu0.16.04.11:52.1.1+build1-0ubuntu0.16.04.11:52.2.1+build1-0ubuntu0.16.04.11:52.3.0+build1-0ubuntu0.16.04.11:52.4.0+build1-0ubuntu0.16.04.21:52.5.0+build1-0ubuntu0.16.04.11:52.6.0+build1-0ubuntu0.16.04.11:52.7.0+build1-0ubuntu0.16.04.11:52.8.0+build1-0ubuntu0.16.04.11:52.9.1+build3-0ubuntu0.16.04.1
1:60.2.1+build1-0ubuntu0.16.04.4
thunderbird
Ubuntu:18.04:LTS
 before 1:60.2.1+build1-0ubuntu0.18.04.2, plus listed versions
1:52.4.0+build1-0ubuntu21:52.6.0+build1-0ubuntu11:52.7.0+build1-0ubuntu11:52.8.0+build1-0ubuntu0.18.04.11:52.9.1+build3-0ubuntu0.18.04.1
1:60.2.1+build1-0ubuntu0.18.04.2
mozjs52
Ubuntu:18.04:LTS
 All versions, plus listed versions
52.3.1-0ubuntu352.3.1-7fakesync152.8.1-0ubuntu0.18.04.152.9.1-0ubuntu0.18.04.1
 None known
mozjs38
Ubuntu:18.04:LTS
 All versions, plus listed versions
38.8.0~repack1-0ubuntu138.8.0~repack1-0ubuntu338.8.0~repack1-0ubuntu4
 None known
mozjs52
Ubuntu:20.04:LTS
 All versions, plus listed versions
52.9.1-1build152.9.1-1ubuntu3
 None known

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2018-18499 is a medium vulnerability (CVSS 6.5) in Mozilla Firefox, published September 7, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.09%, the 65th percentile. Fixed in firefox-esr 60.2.0esr-1.

References

Show 46 moreShow less
This page doesn't list everything

Left out here: 99 versions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open