CVE-2018-5142

—

CVSS 3.0

5.3 medium

EPSS

1%p67

Published

Jun 11, 2018 (Jun 11, 2018)

Modified

Jun 17, 2026

Description

If Media Capture and Streams API permission is requested from documents with "data:" or "blob:" URLs, the permission notifications do not properly display the originating domain. The notification states "Unknown protocol" as the requestee, leading to user confusion about which site is asking for this permission. This vulnerability affects Firefox < 59.

Vendors: mozilla canonical
Products: firefox, ubuntu linux
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (1.2%)

In the news0 stories

No ingested article mentions this CVE yet.