CVE-2019-11741: XSS
First published: Tue Sep 03 2019(Updated: )
A compromised sandboxed content process can perform a Universal Cross-site Scripting (UXSS) attack on content from any site it can cause to be loaded in the same process. Because addons.mozilla.org and accounts.firefox.com have close ties to the Firefox product, malicious manipulation of these sites within the browser can potentially be used to modify a user's Firefox configuration. These two sites will now be isolated into their own process and not allowed to be loaded in a standard content process.
Credit: security@mozilla.org security@mozilla.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Mozilla Firefox | <69 | 69 |
| Mozilla Firefox | <69.0 | |
| debian/firefox | 132.0.1-1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://bugzilla.mozilla.org/show_bug.cgi?id=1539595
- https://www.mozilla.org/en-US/security/advisories/mfsa2019-25/
- https://www.mozilla.org/security/advisories/mfsa2019-25/
- https://launchpad.net/bugs/cve/CVE-2019-11741
- https://www.mozilla.org/en-US/security/advisories/mfsa2019-25/#CVE-2019-11747
- https://www.mozilla.org/en-US/security/advisories/mfsa2019-25/#CVE-2019-11741
- https://security-tracker.debian.org/tracker/CVE-2019-11741
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11741
- https://nvd.nist.gov/vuln/detail/CVE-2019-11741
- https://ubuntu.com/security/CVE-2019-11741
Peer vulnerabilities
(Found alongside the following vulnerabilities)
Frequently Asked Questions
What is CVE-2019-11741?
CVE-2019-11741 is a vulnerability that allows a compromised sandboxed content process to perform a Universal Cross-site Scripting (UXSS) attack on content from any site it can cause to be loaded in the same process.
How does CVE-2019-11741 affect Mozilla Firefox?
CVE-2019-11741 affects Mozilla Firefox versions up to and exclusive of 69.
What is the severity of CVE-2019-11741?
CVE-2019-11741 has a severity rating of high (7).
How can I fix CVE-2019-11741?
To fix CVE-2019-11741, update Mozilla Firefox to version 69 or newer.
Where can I find more information about CVE-2019-11741?
You can find more information about CVE-2019-11741 on the Mozilla Bugzilla page (https://bugzilla.mozilla.org/show_bug.cgi?id=1539595) and the Mozilla Security Advisories page (https://www.mozilla.org/en-US/security/advisories/mfsa2019-25/).
- agent/type
- agent/first-publish-date
- agent/severity
- collector/mozilla-advisory
- agent/software-canonical-lookup-request
- agent/weakness
- collector/nvd-index
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/description
- collector/launchpad-cve
- source/Launchpad
- agent/references
- agent/author
- source/Mozilla
- agent/software-canonical-lookup
- agent/tags
- agent/event
- collector/nvd-cve
- source/NVD
- collector/security-tracker-debian
- source/Debian
- agent/softwarecombine
- collector/usn-cve
- source/Ubuntu
- vendor/mozilla
- canonical/mozilla firefox
- package-manager/debian