CVE-2019-17003: XSS
Published Feb 16, 2023
·Updated
Scanning a QR code that contained a javascript: URL would have resulted in the Javascript being executed.
Affected Software
2 affected components
Mozilla Firefox Iphone Os<=25.0
Mozilla Firefox Mobile Iphone Os<=25.0
Event History
Feb 16, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionWeakness
Data Sourced
via NVD·10:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2019-17003?
CVE-2019-17003 is categorized as a high severity vulnerability.
2
How do I fix CVE-2019-17003?
To remediate CVE-2019-17003, users should update Mozilla Firefox to the latest version beyond 25.0.
3
What systems are affected by CVE-2019-17003?
CVE-2019-17003 affects Mozilla Firefox versions up to and including 25.0 on iPhone OS.
4
What happens if I scan a QR code containing a javascript: URL in CVE-2019-17003?
Scanning such a QR code could lead to unauthorized JavaScript execution within the browser.
5
Is CVE-2019-17003 specific to any device?
Yes, CVE-2019-17003 specifically affects the iPhone OS version of Mozilla Firefox.