CVE-2019-11723

A vulnerability exists during the installation of add-ons where the initial fetch ignored the origin attributes of the browsing context

published July 23, 2019

CVSS
—
EPSS
1%
Percentile
56.4
In the wild
Unconfirmed
What it is

A vulnerability exists during the installation of add-ons where the initial fetch ignored the origin attributes of the browsing context. This could leak cookies in private browsing mode or across different "containers" for people who use the Firefox Multi-Account Containers Web Extension. This vulnerability affects Firefox < 68.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00807 · 56.4th percentile
Published
2019-07-23T13:17Z
EPSS history
Timeline
  • 23 JUL 13:17Z
    A vulnerability exists during the installation of add-ons where the initial fetch ignored the origin attributes of the browsing context
    cvelistv5