CVE-2019-11761
Impact from exposing this object appears to be minimal, however it was a bypass of existing defense in depth mechanisms.
Does this matter?
Lower severity and a low EPSS score (0.79%). Track it; it rarely justifies an emergency change on its own.
Description
By using a form with a data URI it was possible to gain access to the privileged JSONView object that had been cloned into content. Impact from exposing this object appears to be minimal, however it was a bypass of existing defense in depth mechanisms. This vulnerability affects Firefox < 70, Thunderbird < 68.2, and Firefox ESR < 68.2.
- CVSS 3.1
- 5.4 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
- EPSS
- 0.79% probability · 56th percentile
- Public exploits
- None in Exploit-DB
- CISA KEV
- Not listed
- Weakness
- CWE-362, CWE-862
- Affected
- mozilla/firefox · mozilla/firefox esr · mozilla/thunderbird · canonical/ubuntu linux
- Source
- security@mozilla.org
EPSS 0.8% since 27 October 2026; no change recorded yet. Points are recorded when the score first appears and whenever it moves by a percentage point or more.
References
- https://bugzilla.mozilla.org/show_bug.cgi?id=1561502Issue Tracking, Permissions Required
- https://security.gentoo.org/glsa/202003-10Third Party Advisory
- https://usn.ubuntu.com/4335-1/Third Party Advisory
- https://www.mozilla.org/security/advisories/mfsa2019-33/Vendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2019-34/Vendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2019-35/Vendor Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=1561502Issue Tracking, Permissions Required
- https://security.gentoo.org/glsa/202003-10Third Party Advisory
- https://usn.ubuntu.com/4335-1/Third Party Advisory
- https://www.mozilla.org/security/advisories/mfsa2019-33/Vendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2019-34/Vendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2019-35/Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.