Lucene search

K
cvelistMozillaCVELIST:CVE-2019-11721
HistoryJul 23, 2019 - 1:17 p.m.

CVE-2019-11721

2019-07-2313:17:26
mozilla
www.cve.org
2

6.9 Medium

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

79.3%

The unicode latin ‘kra’ character can be used to spoof a standard ‘k’ character in the addressbar. This allows for domain spoofing attacks as do not display as punycode text, allowing for user confusion. This vulnerability affects Firefox < 68.

CNA Affected

[
  {
    "product": "Firefox",
    "vendor": "Mozilla",
    "versions": [
      {
        "lessThan": "68",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

6.9 Medium

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

79.3%