CVE-2019-11701

The default webcal: protocol handler will load a web site vulnerable to cross-site scripting (XSS) attacks

published July 23, 2019

CVSS
—
EPSS
1%
Percentile
50.1
In the wild
Unconfirmed
What it is

The default webcal: protocol handler will load a web site vulnerable to cross-site scripting (XSS) attacks. This default was left in place as a legacy feature and has now been removed. *Note: this issue only affects users with an account on the vulnerable service. Other users are unaffected.*. This vulnerability affects Firefox < 67.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00642 · 50.1th percentile
Published
2019-07-23T13:21Z
EPSS history
Timeline
  • 23 JUL 13:21Z
    The default webcal: protocol handler will load a web site vulnerable to cross-site scripting (XSS) attacks
    cvelistv5