CVE-2018-12395

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

By rewriting the Host: request headers using the webRequest API, a WebExtension can bypass domain restrictions through domain fronting. This would allow access to domains that share a host that are otherwise restricted. This vulnerability affects Firefox ESR < 60.3 and Firefox < 63.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published: Feb 28, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-123966.5A vulnerability where a WebExtension can run content scripts in disallowed contexts following navigation or other events. This allows for po CVE-2018-123977.1A WebExtension can request access to local files without the warning prompt stating that the extension will "Access your data for all websit CVE-2018-123986.5By using the reflected URL in some special resource URIs, such as chrome:, it is possible to inject stylesheets and bypass Content Security CVE-2018-123994.3When a new protocol handler is registered, the API accepts a title argument which can be used to mislead users about which domain is registe CVE-2018-12408.0Dell EMC ViPR Controller, versions after 3.0.0.38, contain an information exposure vulnerability in the VRRP. VRRP defaults to an insecure c CVE-2018-124005.3In private browsing mode on Firefox for Android, favicons are cached in the cache/icons folder as they are in non-private mode. This allows CVE-2018-124017.5Some special resource URIs will cause a non-exploitable crash if loaded with optional parameters following a '?' in the parsed string. This CVE-2018-124026.5The internal WebBrowserPersist code does not use correct origin context for a resource being saved. This manifests when sub-resources are lo CVE-2018-124035.3If a site is loaded over a HTTPS connection but loads a favicon resource over HTTP, the mixed content warning is not displayed to users. Thi CVE-2018-124045.9A cached side channel attack during handshakes using RSA encryption could allow for the decryption of encrypted content. This is a variant o CVE-2018-124059.8Mozilla developers and community members reported memory safety bugs present in Firefox 63 and Firefox ESR 60.3. Some of these bugs showed e CVE-2018-124068.8Mozilla developers and community members reported memory safety bugs present in Firefox 63. Some of these bugs showed evidence of memory cor