CVE-2018-5166

CVE-2018-5166 describes a vulnerability in Firefox versions prior to 60 where malicious WebExtensions could bypass host permission settings. By leveraging request redirection and the "filterReponseData" filter, an attacker could redirect network traffic and access content from hosts without explicit user permission. This high-severity vulnerability (CVSS 7.5) has a low attack complexity and could lead to significant confidentiality impacts, affecting various Firefox and Ubuntu Linux distributions. While no public exploits or active exploitation have been identified, and community discussion is minimal, the potential for unauthorized data access remains a concern.