Vulnerability CVE-2019-11720: Information

Description

Some unicode characters are incorrectly treated as whitespace during the parsing of web content instead of triggering parsing errors. This allows malicious code to then be processed, evading cross-site scripting (XSS) filtering. This vulnerability affects Firefox < 68.

Severity: MEDIUM (6.1) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

URL: https://nvd.nist.gov/vuln/detail/CVE-2019-11720
Published: July 23, 2019
Modified: March 2, 2023
Error type identifier: CWE-79

Fixed packages

Package name
Branch
Fixed in version
Version from repository
Errata ID
Task #
State
firefoxsisyphus68.0-alt1126.0.1-alt1ALT-PU-2019-2301-1234573Fixed
firefoxp1068.0-alt1118.0.2-alt0.p10.1ALT-PU-2019-2301-1234573Fixed
firefoxp968.0.1-alt0.p9.1105.0.1-alt0.c9.1ALT-PU-2019-2479-1235125Fixed
firefoxp868.0.1-alt0.M80P.168.0.1-alt0.M80P.1ALT-PU-2019-2938-1236175Fixed
firefoxc10f168.0-alt1112.0.2-alt0.p10.1ALT-PU-2019-2301-1234573Fixed
firefoxc9f268.0.1-alt0.p9.1105.0.1-alt0.c9.1ALT-PU-2019-2479-1235125Fixed
firefoxp1168.0-alt1126.0.1-alt1ALT-PU-2019-2301-1234573Fixed
firefox-esrsisyphus68.0.1-alt1115.11.0-alt1ALT-PU-2019-2324-1234871Fixed
firefox-esrp1068.0.1-alt1115.11.0-alt1ALT-PU-2019-2324-1234871Fixed
firefox-esrp968.0.2-alt1102.11.0-alt0.c9.1ALT-PU-2019-2486-1235108Fixed
firefox-esrp868.1.0-alt1.M80P.168.4.1-alt0.M80P.1ALT-PU-2019-2937-1236175Fixed
firefox-esrc10f168.0.1-alt1115.9.1-alt0.c10.1ALT-PU-2019-2324-1234871Fixed
firefox-esrc9f268.0.2-alt1102.12.0-alt0.c9.1ALT-PU-2019-2486-1235108Fixed
firefox-esrp1168.0.1-alt1115.11.0-alt1ALT-PU-2019-2324-1234871Fixed

References to Advisories, Solutions, and Tools

Hyperlink
Resource
https://www.mozilla.org/security/advisories/mfsa2019-21/
  • Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1556230
  • Issue Tracking
  • Permissions Required
  • Vendor Advisory
GLSA-201908-12
  • Third Party Advisory
openSUSE-SU-2019:2249
  • Mailing List
  • Third Party Advisory
openSUSE-SU-2019:2248
  • Mailing List
  • Third Party Advisory
openSUSE-SU-2019:2251
  • Mailing List
  • Third Party Advisory
openSUSE-SU-2019:2260
  • Mailing List
  • Third Party Advisory

    1. Configuration 1

      cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
      End excliding
      68.0

      Configuration 2

      cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*
      cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*
VKontakte|Telegram|YouTube|Forum|GitHub|Bugzilla
Version: v24.5.3
Back to top