Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2019-11723

Date: July 23, 2019

A vulnerability exists during the installation of add-ons where the initial fetch ignored the origin attributes of the browsing context. This could leak cookies in private browsing mode or across different "containers" for people who use the Firefox Multi-Account Containers Web Extension. This vulnerability affects Firefox < 68.

Language: Unix

Severity Score

Related Resources (11)

http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00017.html
https://bugzilla.mozilla.org/show_bug.cgi?id=1528335
https://nvd.nist.gov/vuln/detail/CVE-2019-11723
https://www.mozilla.org/security/advisories/mfsa2019-21/
http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00009.html
https://people.canonical.com/~ubuntu-security/cve/CVE-2019-11723
http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00010.html
https://security.gentoo.org/glsa/201908-12
https://access.redhat.com/security/cve/CVE-2019-11723
http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00011.html
https://www.mend.io/vulnerability-database/CVE-2019-11723

Severity Score

Weakness Type (CWE)

Origin Validation Error

CWE-346

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): HIGH
Integrity (I): NONE
Availability (A): NONE

CVSS v2

Base Score:
Access Vector (AV): NETWORK
Access Complexity (AC): LOW
Authentication (AU): NONE
Confidentiality (C): PARTIAL
Integrity (I): NONE
Availability (A): NONE
Additional information:

Do you need more information?

Contact Us