VDB

CVE-2018-12403

CVE-2018-12403 PUBLISHED CVSS 5.300000190734863 MEDIUM

If a site is loaded over a HTTPS connection but loads a favicon resource over HTTP, the mixed content warning is not displayed to users. This vulnerability affects Firefox < 63.

EPSS 2.05% · 80.5th percentile

Risk Scores

CVSS 3.0
5.300000190734863
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
EPSS Score
2.05%
80.5th percentile

Affected Products

VendorProductVersions
Ubuntu:18.04:LTSfirefox*, 61.0+build3-0ubuntu0.18.04.1, 60.0.1+build2-0ubuntu0.18.04.1
Ubuntu:16.04:LTSfirefox50.0.2+build1-0ubuntu0.16.04.1, 50.1.0+build2-0ubuntu0.16.04.1, *
Ubuntu:18.04:LTSmozjs3838.8.0~repack1-0ubuntu4, 38.8.0~repack1-0ubuntu3, 38.8.0~repack1-0ubuntu1
Ubuntu:20.04:LTSmozjs5252.9.1-1build1, 0, 52.9.1-1ubuntu3
Ubuntu:14.04:LTSfirefox50.0.2+build1-0ubuntu0.14.04.1, *, *
Ubuntu:18.04:LTSmozjs520, 52.9.1-0ubuntu0.18.04.1, 52.8.1-0ubuntu0.18.04.1

Timeline

  • Oct 24, 2018 CVE Published
  • Apr 14, 2021 EPSS Score
  • Jun 23, 2021 EPSS Score
  • Aug 25, 2021 EPSS Score
  • Dec 29, 2021 EPSS Score
  • Mar 2, 2022 EPSS Score
  • May 4, 2022 EPSS Score
  • Jul 6, 2022 EPSS Score
  • Nov 10, 2022 EPSS Score
  • Jan 12, 2023 EPSS Score
  • Mar 16, 2023 EPSS Score
  • May 18, 2023 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›