CVEvulnerability
CVE-2019-11715
6.1 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2019-07-23
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 6.1 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Due to an error while parsing page content, it is possible for properly sanitized user input to be misinterpreted and lead to XSS hazards on web sites in certain circumstances. This vulnerability affects Firefox ESR < 60.8, Firefox < 68, and Thunderbird < 60.8.
Affected configurations
• mozilla firefox (< 60.8.0)
• mozilla firefox (< 68.0)
• mozilla thunderbird (< 60.8.0)
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00055.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00058.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00073.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00009.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00010.html lists.opensuse.org
- https://bugzilla.mozilla.org/show_bug.cgi?id=1555523 Issue Tracking, Permissions Required, Vendor Advisory
- https://lists.debian.org/debian-lts-announce/2019/08/msg00001.html lists.debian.org
- https://lists.debian.org/debian-lts-announce/2019/08/msg00002.html lists.debian.org
- https://security.gentoo.org/glsa/201908-12 security.gentoo.org
- https://security.gentoo.org/glsa/201908-20 security.gentoo.org
- https://www.mozilla.org/security/advisories/mfsa2019-21/ Vendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2019-22/ Vendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2019-23/ Vendor Advisory
- http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00055.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00058.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00073.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00009.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00010.html lists.opensuse.org
- https://bugzilla.mozilla.org/show_bug.cgi?id=1555523 Issue Tracking, Permissions Required, Vendor Advisory
- https://lists.debian.org/debian-lts-announce/2019/08/msg00001.html lists.debian.org
- https://lists.debian.org/debian-lts-announce/2019/08/msg00002.html lists.debian.org
- https://security.gentoo.org/glsa/201908-12 security.gentoo.org
- https://security.gentoo.org/glsa/201908-20 security.gentoo.org
- https://www.mozilla.org/security/advisories/mfsa2019-21/ Vendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2019-22/ Vendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2019-23/ Vendor Advisory