{
  "cveId": "CVE-2018-5143",
  "url": "https://patchblox.com/security/cve/CVE-2018-5143",
  "summary": "CVE-2018-5143 is fixed in 4 products on 1 platform, first by firefox 59.0.1\u002Bbuild1-0ubuntu1, released June 11, 2018. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "firefox: URLs using \u0022javascript:\u0022 have the protocol removed when pasted into the addressbar to protect users from cross-site s...",
  "description": "URLs using \u0022javascript:\u0022 have the protocol removed when pasted into the addressbar to protect users from cross-site scripting (XSS) attacks, but if a tab character is embedded in the \u0022javascript:\u0022 URL the protocol is not removed and the script will execute. This could allow users to be socially engineered to run an XSS attack against themselves. This vulnerability affects Firefox \u0026lt; 59.",
  "published": "2018-03-13T17:00:00Z",
  "severity": "Low",
  "epss": 0.00919,
  "epssPercentile": 0.60469,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "firefox",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "59.0.1\u002Bbuild1-0ubuntu1",
      "fix": "firefox 59.0.1\u002Bbuild1-0ubuntu1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-firefox-59.0.1-build1-0ubuntu1",
      "released": "2018-06-11T14:29:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox-globalmenu",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "59.0.1\u002Bbuild1-0ubuntu1",
      "fix": "firefox-globalmenu 59.0.1\u002Bbuild1-0ubuntu1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-firefox-globalmenu-59.0.1-build1-0ubuntu1",
      "released": "2018-06-11T14:29:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox-mozsymbols",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "59.0.1\u002Bbuild1-0ubuntu1",
      "fix": "firefox-mozsymbols 59.0.1\u002Bbuild1-0ubuntu1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-firefox-mozsymbols-59.0.1-build1-0ubuntu1",
      "released": "2018-06-11T14:29:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox-testsuite",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "59.0.1\u002Bbuild1-0ubuntu1",
      "fix": "firefox-testsuite 59.0.1\u002Bbuild1-0ubuntu1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-firefox-testsuite-59.0.1-build1-0ubuntu1",
      "released": "2018-06-11T14:29:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-07T18:46:35Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}