Lucene search

K
cvelistMozillaCVELIST:CVE-2019-11718
HistoryJul 23, 2019 - 1:17 p.m.

CVE-2019-11718

2019-07-2313:17:58
mozilla
raw.githubusercontent.com
2

4.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.6%

Activity Stream can display content from sent from the Snippet Service website. This content is written to innerHTML on the Activity Stream page without sanitization, allowing for a potential access to other information available to the Activity Stream, such as browsing history, if the Snipper Service were compromised. This vulnerability affects Firefox < 68.

4.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.6%