CVE-2019-11723

HIGH 7.5CVE-2019-11723 · Published 23/07/2019 · updated 17/06/2026

In short

CVE-2019-11723 is a HIGH (CVSS 7.5) vulnerability affecting firefox (mozilla).
Chance of exploitation in the next 30 days (EPSS): 0.81%, higher than 57.0% of all vulnerabilities.
Fix: update to 68.0 or later.

Package	Affected versions	Patched versions
firefox mozilla	`< 68.0`	`68.0`

Description

A vulnerability exists during the installation of add-ons where the initial fetch ignored the origin attributes of the browsing context. This could leak cookies in private browsing mode or across different "containers" for people who use the Firefox Multi-Account Containers Web Extension. This vulnerability affects Firefox < 68.

References

lists.opensuse.org/opensuse-security-announce/2019-10/msg00009.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2019-10/msg00010.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2019-10/msg00011.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2019-10/msg00017.html · Mailing List
bugzilla.mozilla.org/show_bug.cgi · Issue Tracking
security.gentoo.org/glsa/201908-12 · Third Party Advisory
mozilla.org/security/advisories/mfsa2019-21 · Vendor Advisory

More vulnerabilities in firefox

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

firefox

mozilla

< 68.0

68.0

Description

More vulnerabilities in firefox

See all →