A vulnerability exists where the caret ("^") character is improperly escaped constructing some URIs due to it being used as a separator, allowing for possible spoofing of origin attributes. This vulnerability affects Firefox ESR < 60.8, Firefox < 68, and Thunderbird < 60.8.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mozilla
Published: 2019-07-23T13:18:07
Updated: 2019-10-04T17:06:46
Reserved: 2019-05-03T00:00:00
Link: CVE-2019-11717
JSON object: View
NVD Information
Status : Analyzed
Published: 2019-07-23T14:15:15.937
Modified: 2023-02-28T14:38:39.557
Link: CVE-2019-11717
JSON object: View
Redhat Information
No data.
CWE