CVE-2019-11718

—

CVSS 3.1

5.3 medium

EPSS

1%p67

Published

Jul 23, 2019 (Jul 23, 2019)

Modified

Jun 17, 2026

Description

Activity Stream can display content from sent from the Snippet Service website. This content is written to innerHTML on the Activity Stream page without sanitization, allowing for a potential access to other information available to the Activity Stream, such as browsing history, if the Snipper Service were compromised. This vulnerability affects Firefox < 68.

Vendors: mozilla opensuse
Products: firefox, leap
Weakness: CWE-74
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.2%)

In the news0 stories

No ingested article mentions this CVE yet.