CVE-2019-11725

MEDIUM 6.5CVE-2019-11725 · Published 23/07/2019 · updated 17/06/2026

In short

CVE-2019-11725 is a MEDIUM (CVSS 6.5) vulnerability affecting firefox (mozilla).
Chance of exploitation in the next 30 days (EPSS): 1.1%, higher than 66.9% of all vulnerabilities.
Fix: update to 68.0 or later.

Package	Affected versions	Patched versions
firefox mozilla	`< 68.0`	`68.0`

Description

When a user navigates to site marked as unsafe by the Safebrowsing API, warning messages are displayed and navigation is interrupted but resources from the same site loaded through websockets are not blocked, leading to the loading of unsafe resources and bypassing safebrowsing protections. This vulnerability affects Firefox < 68.

References

lists.opensuse.org/opensuse-security-announce/2019-10/msg00009.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2019-10/msg00010.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2019-10/msg00011.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2019-10/msg00017.html · Mailing List
bugzilla.mozilla.org/show_bug.cgi · Issue Tracking
security.gentoo.org/glsa/201908-12 · Third Party Advisory
mozilla.org/security/advisories/mfsa2019-21 · Vendor Advisory

More vulnerabilities in firefox

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

firefox

mozilla

< 68.0

68.0

Description

More vulnerabilities in firefox

See all →