CVE Database›CVE-2018-12381

CVE-2018-12381

Mozilla: Dragging and dropping Outlook email message results in page navigation

Loading…

Severity

Low

Red Hat Product Security

4.4

CVSS 3.0

Review impact separately from score.

Published · September 5, 2018

Updated · November 26, 2025

Description

Manually dragging and dropping an Outlook email message into the browser will trigger a page navigation when the message's mail columns are incorrectly interpreted as a URL. Note: this issue only affects Windows operating systems with Outlook installed. Other operating systems are not affected.. This vulnerability affects Firefox ESR < 60.2 and Firefox < 62.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.0 · 4.4
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

CWE-451 · User Interface (UI) Misrepresentation of Critical Information