CVE-2019-11761

By using a form with a data URI it was possible to gain access to the privileged JSONView object that had been cloned into content

published January 8, 2020

CVSS
—
EPSS
1%
Percentile
55.7
In the wild
Unconfirmed
What it is

By using a form with a data URI it was possible to gain access to the privileged JSONView object that had been cloned into content. Impact from exposing this object appears to be minimal, however it was a bypass of existing defense in depth mechanisms. This vulnerability affects Firefox < 70, Thunderbird < 68.2, and Firefox ESR < 68.2.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00787 · 55.7th percentile
Published
2020-01-08T19:52Z
EPSS history
Timeline
  • 08 JAN 19:52Z
    By using a form with a data URI it was possible to gain access to the privileged JSONView object that had been cloned into content
    cvelistv5