CVEvulnerability
CVE-2019-11699
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2019-07-23
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 6.5 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Description
A malicious page can briefly cause the wrong name to be highlighted as the domain name in the addressbar during page navigations. This could result in user confusion of which site is currently loaded for spoofing attacks. This vulnerability affects Firefox < 67.
Affected configurations
• mozilla firefox (< 67.0)
References
- https://bugzilla.mozilla.org/show_bug.cgi?id=1528939 Issue Tracking, Permissions Required, Vendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2019-13/ Vendor Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=1528939 Issue Tracking, Permissions Required, Vendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2019-13/ Vendor Advisory