CVE-2019-11715

보통 6.1CVE-2019-11715 · Published 23/07/2019 · updated 17/06/2026

요약

CVE-2019-11715은(는) firefox (mozilla), thunderbird (mozilla)에 영향을 주는 보통 (CVSS 6.1) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 1.5%, 전체 취약점의 74.3%보다 높음.
조치: 60.8.0, 68.0 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
firefox mozilla	`< 60.8.0< 68.0`	`60.8.068.0`
thunderbird mozilla	`< 60.8.0`	`60.8.0`

Description

Due to an error while parsing page content, it is possible for properly sanitized user input to be misinterpreted and lead to XSS hazards on web sites in certain circumstances. This vulnerability affects Firefox ESR < 60.8, Firefox < 68, and Thunderbird < 60.8.

References

lists.opensuse.org/opensuse-security-announce/2019-07/msg00055.html
lists.opensuse.org/opensuse-security-announce/2019-07/msg00058.html
lists.opensuse.org/opensuse-security-announce/2019-08/msg00073.html
lists.opensuse.org/opensuse-security-announce/2019-10/msg00009.html
lists.opensuse.org/opensuse-security-announce/2019-10/msg00010.html
bugzilla.mozilla.org/show_bug.cgi · Issue Tracking
lists.debian.org/debian-lts-announce/2019/08/msg00001.html
lists.debian.org/debian-lts-announce/2019/08/msg00002.html
security.gentoo.org/glsa/201908-12
security.gentoo.org/glsa/201908-20
mozilla.org/security/advisories/mfsa2019-21 · Vendor Advisory
mozilla.org/security/advisories/mfsa2019-22 · Vendor Advisory
mozilla.org/security/advisories/mfsa2019-23 · Vendor Advisory

firefox의 다른 취약점

모두 보기 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free