CVE-2018-12358: Canonical Ubuntu Linux

Medium severity, CVSS 4.3. EPSS: 1.3% chance of exploitation in the next 30 days.

Service workers can use redirection to avoid the tainting of cross-origin resources in some instances, allowing a malicious site to read responses which are supposed to be opaque. This vulnerability affects Firefox < 61.

Affected products

• Canonical Ubuntu Linux: version 14.04 only; version 16.04 only; version 17.10 only; version 18.04 only
• Mozilla Firefox: before 61.0 (fixed in 61.0)

Published 2018-10-18. Last modified 2026-06-17.