CVE-2019-11717

A vulnerability exists where the caret ("^") character is improperly escaped constructing some URIs due to it being used as a separator, allowing for possible…

published July 23, 2019

CVSS
—
EPSS
2%
Percentile
81.8
In the wild
Unconfirmed
What it is

A vulnerability exists where the caret ("^") character is improperly escaped constructing some URIs due to it being used as a separator, allowing for possible spoofing of origin attributes. This vulnerability affects Firefox ESR < 60.8, Firefox < 68, and Thunderbird < 60.8.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02131 · 81.8th percentile
Published
2019-07-23T13:18Z
EPSS history
Timeline
  • 23 JUL 13:18Z
    A vulnerability exists where the caret ("^") character is improperly escaped constructing some URIs due to it being used as a separator, allowing for possible…
    cvelistv5