CVE-2018-5168

Description

Sites can bypass security checks on permissions to install lightweight themes by manipulating the "baseURI" property of the theme element. This could allow a malicious site to install a theme without user interaction which could contain offensive or embarrassing images. This vulnerability affects Thunderbird < 52.8, Thunderbird ESR < 52.8, Firefox < 60, and Firefox ESR < 52.8.

5.3

CVSS

Severity: Medium

CVSS 3.0 •

CVSS 2.0 •

EPSS 1.01% Top 25%

Vendor Advisory redhat.com Vendor Advisory gentoo.org Vendor Advisory redhat.com Vendor Advisory redhat.com Vendor Advisory gentoo.org Vendor Advisory ubuntu.com Vendor Advisory debian.org Vendor Advisory ubuntu.com Vendor Advisory redhat.com Vendor Advisory debian.org Vendor Advisory mozilla.org Vendor Advisory mozilla.org Vendor Advisory mozilla.org Vendor Advisory mozilla.org

Affected: Mozilla Thunderbird

Affected: Mozilla Thunderbird ESR

Affected: Mozilla Firefox

Affected: Mozilla Firefox ESR

References

Link	Tags
https://access.redhat.com/errata/RHSA-2018:1415	third party advisory vendor advisory
https://security.gentoo.org/glsa/201810-01	third party advisory vendor advisory
https://access.redhat.com/errata/RHSA-2018:1726	third party advisory vendor advisory
https://access.redhat.com/errata/RHSA-2018:1414	third party advisory vendor advisory
https://security.gentoo.org/glsa/201811-13	third party advisory vendor advisory
https://www.mozilla.org/security/advisories/mfsa2018-13/	vendor advisory
https://www.mozilla.org/security/advisories/mfsa2018-11/	vendor advisory
https://usn.ubuntu.com/3660-1/	third party advisory vendor advisory
http://www.securitytracker.com/id/1040896	vdb entry third party advisory
https://www.debian.org/security/2018/dsa-4199	third party advisory vendor advisory
https://usn.ubuntu.com/3645-1/	third party advisory vendor advisory
https://lists.debian.org/debian-lts-announce/2018/05/msg00013.html	third party advisory mailing list
https://lists.debian.org/debian-lts-announce/2018/05/msg00007.html	third party advisory mailing list
https://access.redhat.com/errata/RHSA-2018:1725	third party advisory vendor advisory
https://www.debian.org/security/2018/dsa-4209	third party advisory vendor advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1449548	issue tracking permissions required vendor advisory
https://www.mozilla.org/security/advisories/mfsa2018-12/	vendor advisory
http://www.securityfocus.com/bid/104136	vdb entry third party advisory

Frequently Asked Questions

What is the severity of CVE-2018-5168?: CVE-2018-5168 has been scored as a medium severity vulnerability.
How to fix CVE-2018-5168?: To fix CVE-2018-5168, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2018-5168 being actively exploited in the wild?: It is possible that CVE-2018-5168 is being exploited or will be exploited in a near future based on public information. According to its EPSS score, there is a ~1% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2018-5168?: CVE-2018-5168 affects Mozilla Thunderbird, Mozilla Thunderbird ESR, Mozilla Firefox, Mozilla Firefox ESR.