Description
A service worker can send the activate event on itself periodically which allows it to run perpetually, allowing it to monitor activity by users. Affects all versions prior to Firefox 60.
Scores
CVSS v3
7.5
EPSS
0.0043
EPSS Percentile
62.7%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Details
CWE
CWE-772
Status
published
Products (1)
mozilla/firefox
< 60.0
Published
Apr 26, 2019
Tracked Since
Feb 18, 2026