CVE-2019-11595: Input Validation
In uBlock before 0.9.5.15, the $rewrite filter option allows filter-list maintainers to run arbitrary code in a client-side session when a web service loads a script for execution using XMLHttpRequest or Fetch, and the script origin has an open redirect.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-11595?
CVE-2019-11595 is considered a high severity vulnerability due to the potential for arbitrary code execution.
How do I fix CVE-2019-11595?
To fix CVE-2019-11595, upgrade uBlock Origin to version 0.9.5.15 or later.
Who is affected by CVE-2019-11595?
Users of uBlock Origin versions prior to 0.9.5.15 are affected by CVE-2019-11595.
What kind of attack can be executed with CVE-2019-11595?
CVE-2019-11595 allows attackers to execute arbitrary code in a client's session through malicious scripts loaded by open redirects.
What is the root cause of CVE-2019-11595?
The root cause of CVE-2019-11595 is the $rewrite filter option that allows filter-list maintainers to load scripts without proper validation.