CVE-2019-11717

Reference Links

• https://bugzilla.mozilla.org/show_bug.cgi?id=1548306
• https://www.mozilla.org/en-US/security/advisories/mfsa2019-21/
• https://www.mozilla.org/en-US/security/advisories/mfsa2019-21/#CVE-2019-11727
• https://www.mozilla.org/en-US/security/advisories/mfsa2019-22/
• https://www.mozilla.org/en-US/security/advisories/mfsa2019-23/
• https://www.mozilla.org/en-US/security/advisories/mfsa2019-28/
• http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00055.html
• http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00058.html
• http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00073.html
• http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00009.html
• http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00010.html
• https://lists.debian.org/debian-lts-announce/2019/08/msg00001.html
• https://lists.debian.org/debian-lts-announce/2019/08/msg00002.html
• https://security.gentoo.org/glsa/201908-12
• https://security.gentoo.org/glsa/201908-20
• https://www.mozilla.org/security/advisories/mfsa2019-21/
• https://www.mozilla.org/security/advisories/mfsa2019-22/
• https://www.mozilla.org/security/advisories/mfsa2019-23/

Parent vulnerabilities

(Appears in the following advisories)

• MFSA2019-22
• MFSA2019-23
• MFSA2019-28
• MFSA2019-21

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2019-9811
• CVE-2019-11711
• CVE-2019-11712
• CVE-2019-11713
• CVE-2019-11729
• CVE-2019-11715
• CVE-2019-11717
• CVE-2019-11719
• CVE-2019-11730
• CVE-2019-11709
• CVE-2019-11714
• CVE-2019-11716
• CVE-2019-11720
• CVE-2019-11721
• CVE-2019-11723
• CVE-2019-11724
• CVE-2019-11725
• CVE-2019-11727
• CVE-2019-11728
• CVE-2019-11710
• CVE-2019-11718

Frequently Asked Questions

• What is CVE-2019-11717?

  CVE-2019-11717 is a vulnerability where the caret ( ^ ) character is improperly escaped constructing some URIs, allowing for possible spoofing of origin attributes.

• Which software versions are affected by CVE-2019-11717?

  CVE-2019-11717 affects Firefox ESR versions earlier than 60.8, Firefox versions earlier than 68, and Thunderbird versions earlier than 60.8.

• What is the severity of CVE-2019-11717?

  The severity of CVE-2019-11717 is medium with a CVSS score of 5.3.

• How can I fix CVE-2019-11717?

  To fix CVE-2019-11717, users should update to Firefox ESR version 60.8 or later, Firefox version 68 or later, or Thunderbird version 60.8 or later.

• Where can I find more information about CVE-2019-11717?

  More information about CVE-2019-11717 can be found at the following references: [Bugzilla](https://bugzilla.mozilla.org/show_bug.cgi?id=1548306), [Mozilla Security Advisories](https://www.mozilla.org/en-US/security/advisories/mfsa2019-23/), [Mozilla Security Advisories](https://www.mozilla.org/en-US/security/advisories/mfsa2019-28/).