Cross-Origin Shared Worker Vulnerability in Firefox < 59

CVE-2018-5136

A shared worker created from a "data:" URL in one tab can be shared by another tab with a different origin, bypassing the same-origin policy. This vulnerability affects Firefox < 59.

Learn more about our Web Application Penetration Testing UK.