Vulnerability in Mozilla Firefox
CVE-2019-11738
If a Content Security Policy (CSP) directive is defined that uses a hash-based source that takes the empty string as input, execution of any javascript: URIs will be allowed. This could allow for malicious JavaScript content to be run, bypassing CSP permissions. This vulnerability affects Firefox < 69 and Firefox ESR < 68.1.
EPSS: 0.014 (70.6th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L.
Affected products
- Mozilla Firefox — versions unspecified
- Mozilla Firefox Esr — versions unspecified
- Mozilla Firefox_esr
- Opensuse Leap — versions 15.0, 15.1
References
- security@mozilla.org (Exploit, x_refsource_MISC, Issue Tracking, Vendor Advisory)
- security@mozilla.org (x_refsource_CONFIRM, Vendor Advisory)
- security@mozilla.org (x_refsource_CONFIRM, Vendor Advisory)
- security@mozilla.org (vendor-advisory, Mailing List, Third Party Advisory, x_refsource_SUSE)
- security@mozilla.org (vendor-advisory, Mailing List, Third Party Advisory, x_refsource_SUSE)
Frequently asked questions
- What is CVE-2019-11738?
- CVE-2019-11738 is a medium-severity vulnerability in Mozilla Firefox. CVSS score: 6.3/10. Published 2019-09-27.
- How severe is CVE-2019-11738?
- Medium severity. CVSS v3 base score is 6.3 out of 10.