Home > Vulnerability Database > CVE-2019-11715

Mend.io Vulnerability Database

CVE-2019-11715

Good to know:

Date: July 23, 2019

Due to an error while parsing page content, it is possible for properly sanitized user input to be misinterpreted and lead to XSS hazards on web sites in certain circumstances. This vulnerability affects Firefox ESR < 60.8, Firefox < 68, and Thunderbird < 60.8.

Language: Unix

Severity Score

6.1

Related Resources (19)

Url: https://security.alpinelinux.org/vuln/CVE-2019-11715

Url: https://www.mozilla.org/security/advisories/mfsa2019-21/

Url: https://security.gentoo.org/glsa/201908-20

Url: http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00009.html

Url: https://www.mozilla.org/security/advisories/mfsa2019-23/

Url: https://www.mozilla.org/security/advisories/mfsa2019-22/

Url: http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00073.html

Url: https://security.gentoo.org/glsa/201908-12

Url: http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00055.html

Url: https://lists.debian.org/debian-lts-announce/2019/08/msg00002.html

Url: https://bugzilla.mozilla.org/show_bug.cgi?id=1555523

Url: http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00058.html

Url: https://security-tracker.debian.org/tracker/CVE-2019-11715

Url: https://access.redhat.com/security/cve/CVE-2019-11715

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2019-11715

Url: https://nvd.nist.gov/vuln/detail/CVE-2019-11715

Url: http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00010.html

Url: https://lists.debian.org/debian-lts-announce/2019/08/msg00001.html

Url: https://www.mend.io/vulnerability-database/CVE-2019-11715

Severity Score

6.1

Weakness Type (CWE)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CWE-79

Top Fix

Upgrade Version

Upgrade to version firefox - 68.0-1

Learn More

CVSS v3.1

Base Score:	6.1
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	LOW
Privileges Required (PR):	NONE
User Interaction (UI):	REQUIRED
Scope (S):	CHANGED
Confidentiality (C):	LOW
Integrity (I):	LOW
Availability (A):	NONE

CVSS v2

Base Score:	4.3
Access Vector (AV):	NETWORK
Access Complexity (AC):	MEDIUM
Authentication (AU):	NONE
Confidentiality (C):	NONE
Integrity (I):	PARTIAL
Availability (A):	NONE
Additional information:

Mend.io Vulnerability Database

We found results for “”

CVE-2019-11715

Good to know:

Date: July 23, 2019

Language: Unix

Severity Score

Related Resources (19)

Severity Score

Weakness Type (CWE)

Top Fix

Upgrade Version

CVSS v3.1

CVSS v2

Do you need more information?