CVE-2018-12381
Mozilla: Dragging and dropping Outlook email message results in page navigation
Severity
LowRed Hat Product Security
CVSS 3.0
Review impact separately from score.
Published · September 5, 2018
Updated · November 26, 2025
Description
Manually dragging and dropping an Outlook email message into the browser will trigger a page navigation when the message's mail columns are incorrectly interpreted as a URL. Note: this issue only affects Windows operating systems with Outlook installed. Other operating systems are not affected.. This vulnerability affects Firefox ESR < 60.2 and Firefox < 62.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.0 · 4.4CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
CWE-451 · User Interface (UI) Misrepresentation of Critical Information