{"id":"CVE-2019-11761","url":"https://www.cyber-defence.io/tools/cve/CVE-2019-11761","generatedAt":"2026-10-28T22:21:56.489Z","title":"Impact from exposing this object appears to be minimal, however it was a bypass of existing defense in depth mechanisms.","description":"By using a form with a data URI it was possible to gain access to the privileged JSONView object that had been cloned into content. Impact from exposing this object appears to be minimal, however it was a bypass of existing defense in depth mechanisms. This vulnerability affects Firefox < 70, Thunderbird < 68.2, and Firefox ESR < 68.2.","published":"2020-01-08T20:15:13.000Z","lastModified":"2026-06-17T02:13:35.000Z","status":"Modified","sourceIdentifier":"security@mozilla.org","cvss":{"version":"3.1","score":5.4,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N"},"cwe":["CWE-362","CWE-862"],"affected":["mozilla/firefox","mozilla/firefox esr","mozilla/thunderbird","canonical/ubuntu linux"],"epss":{"score":0.00787,"percentile":0.55961,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.79%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1561502","tags":["Issue Tracking","Permissions Required"],"source":"security@mozilla.org"},{"url":"https://security.gentoo.org/glsa/202003-10","tags":["Third Party Advisory"],"source":"security@mozilla.org"},{"url":"https://usn.ubuntu.com/4335-1/","tags":["Third Party Advisory"],"source":"security@mozilla.org"},{"url":"https://www.mozilla.org/security/advisories/mfsa2019-33/","tags":["Vendor Advisory"],"source":"security@mozilla.org"},{"url":"https://www.mozilla.org/security/advisories/mfsa2019-34/","tags":["Vendor Advisory"],"source":"security@mozilla.org"},{"url":"https://www.mozilla.org/security/advisories/mfsa2019-35/","tags":["Vendor Advisory"],"source":"security@mozilla.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1561502","tags":["Issue Tracking","Permissions Required"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/202003-10","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/4335-1/","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.mozilla.org/security/advisories/mfsa2019-33/","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.mozilla.org/security/advisories/mfsa2019-34/","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.mozilla.org/security/advisories/mfsa2019-35/","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2019-11761","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}