Lucene search

K
cvelistMozillaCVELIST:CVE-2019-11717
HistoryJul 23, 2019 - 1:18 p.m.

CVE-2019-11717

2019-07-2313:18:07
mozilla
raw.githubusercontent.com
3

4.5 Medium

AI Score

Confidence

High

0.009 Low

EPSS

Percentile

82.9%

A vulnerability exists where the caret (“^”) character is improperly escaped constructing some URIs due to it being used as a separator, allowing for possible spoofing of origin attributes. This vulnerability affects Firefox ESR < 60.8, Firefox < 68, and Thunderbird < 60.8.