CVE-2019-9808

If WebRTC permission is requested from documents with data: or blob: URLs, the permission notifications do not properly display the originating domain

published April 26, 2019

CVSS
—
EPSS
0%
Percentile
32.7
In the wild
Unconfirmed
What it is

If WebRTC permission is requested from documents with data: or blob: URLs, the permission notifications do not properly display the originating domain. The notification states "Unknown origin" as the requestee, leading to user confusion about which site is asking for this permission. This vulnerability affects Firefox < 66.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00397 · 32.7th percentile
Published
2019-04-26T16:10Z
EPSS history
Timeline
  • 26 APR 16:10Z
    If WebRTC permission is requested from documents with data: or blob: URLs, the permission notifications do not properly display the originating domain
    cvelistv5