CVE-2019-11715

CVE Details

Release Date:	2019-07-23
Impact:	Moderate	What is this?

Description

Due to an error while parsing page content, it is possible for properly sanitized user input to be misinterpreted and lead to XSS hazards on web sites in certain circumstances. This vulnerability affects Firefox ESR < 60.8, Firefox < 68, and Thunderbird < 60.8.

See more information about CVE-2019-11715 from MITRE CVE dictionary and NIST NVD

NOTE: The following CVSS metrics and score provided are preliminary and subject to review.

CVSS v3 metrics

Base Score:	6.1
Vector String:	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Version:	3.0
Attack Vector:	Network
Attack Complexity:	Low
Privileges Required:	None
User Interaction:	Required
Scope:	Changed
Confidentiality Impact:	Low
Integrity Impact:	Low
Availability Impact:	None

Errata information

Platform	Errata	Release Date
Oracle Linux version 6 (firefox)	ELSA-2019-1765	2019-07-11
Oracle Linux version 6 (thunderbird)	ELSA-2019-1777	2019-07-24
Oracle Linux version 7 (firefox)	ELSA-2019-1763	2019-07-11
Oracle Linux version 7 (thunderbird)	ELSA-2019-1775	2019-07-15
Oracle Linux version 8 (firefox)	ELSA-2019-1764	2019-07-30
Oracle Linux version 8 (thunderbird)	ELSA-2019-1799	2019-07-30