What is CVE-2019-11699?

CVE-2019-11699 is a medium-severity vulnerability in Mozilla Firefox. CVSS score: 6.5/10. Published 2019-07-23.

How severe is CVE-2019-11699?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Vulnerability in Mozilla Firefox

CVE-2019-11699

A malicious page can briefly cause the wrong name to be highlighted as the domain name in the addressbar during page navigations. This could result in user confusion of which site is currently loaded for spoofing attacks. This vulnerability affects Firefox < 67.

EPSS: 0.008 (54.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N.

Affected products

Mozilla Firefox — versions unspecified

References

security@mozilla.org (x_refsource_MISC, Vendor Advisory)
security@mozilla.org (Permissions Required, x_refsource_MISC, Issue Tracking, Vendor Advisory)

Frequently asked questions

What is CVE-2019-11699?: CVE-2019-11699 is a medium-severity vulnerability in Mozilla Firefox. CVSS score: 6.5/10. Published 2019-07-23.
How severe is CVE-2019-11699?: Medium severity. CVSS v3 base score is 6.5 out of 10.