CVE-2019-11747
First published: Tue Sep 03 2019(Updated: )
Last updated 24 July 2024
Credit: security@mozilla.org security@mozilla.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Mozilla Firefox ESR | <68.1 | 68.1 |
| Mozilla Firefox | <69.0 | |
| Mozilla Firefox ESR | <68.1.0 | |
| Mozilla Firefox | <69 | 69 |
| debian/firefox | 132.0.2-1 | |
| debian/firefox-esr | 115.14.0esr-1~deb11u1 128.4.0esr-1~deb11u1 128.3.1esr-1~deb12u1 128.4.0esr-1~deb12u1 128.3.1esr-2 128.4.0esr-1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://bugzilla.mozilla.org/show_bug.cgi?id=1564481
- https://www.mozilla.org/en-US/security/advisories/mfsa2019-26/
- http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00011.html
- http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00017.html
- https://www.mozilla.org/security/advisories/mfsa2019-25/
- https://www.mozilla.org/security/advisories/mfsa2019-26/
- https://launchpad.net/bugs/cve/CVE-2019-11747
- https://www.mozilla.org/en-US/security/advisories/mfsa2019-25/
- https://www.mozilla.org/en-US/security/advisories/mfsa2019-26/#CVE-2019-11750
- https://www.mozilla.org/en-US/security/advisories/mfsa2019-25/#CVE-2019-11747
- https://www.mozilla.org/en-US/security/advisories/mfsa2019-26/#CVE-2019-11747
- https://security-tracker.debian.org/tracker/CVE-2019-11747
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11747
- https://nvd.nist.gov/vuln/detail/CVE-2019-11747
- https://ubuntu.com/security/CVE-2019-11747
Peer vulnerabilities
(Found alongside the following vulnerabilities)
Frequently Asked Questions
What is CVE-2019-11747?
CVE-2019-11747 is a vulnerability in Mozilla Firefox that affects the 'Forget about this site' feature in the History pane.
How does CVE-2019-11747 impact users?
CVE-2019-11747 allows sites on the pre-load list to retain HTTP Strict Transport Security (HSTS) settings even after using the 'Forget about this site' feature, potentially compromising user privacy.
Which versions of Mozilla Firefox are affected by CVE-2019-11747?
Mozilla Firefox ESR versions up to 68.1, and Mozilla Firefox versions up to 69 are affected by CVE-2019-11747.
What is the severity of CVE-2019-11747?
CVE-2019-11747 has a low severity rating.
How can the vulnerability CVE-2019-11747 be fixed?
To fix CVE-2019-11747, users should update to Mozilla Firefox ESR 68.1 or newer, or Mozilla Firefox 69 or newer.
- agent/type
- agent/first-publish-date
- agent/weakness
- agent/severity
- collector/mozilla-advisory
- agent/software-canonical-lookup-request
- collector/nvd-index
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- collector/launchpad-cve
- source/Launchpad
- agent/author
- source/Mozilla
- agent/software-canonical-lookup
- collector/nvd-cve
- source/NVD
- collector/usn-cve
- source/Ubuntu
- agent/references
- agent/softwarecombine
- agent/tags
- agent/description
- agent/event
- collector/security-tracker-debian
- source/Debian
- vendor/mozilla
- canonical/mozilla firefox esr
- canonical/mozilla firefox
- package-manager/debian