Lucene search

K
prionPRIOn knowledge basePRION:CVE-2019-11718
HistoryJul 23, 2019 - 2:15 p.m.

Design/Logic Flaw

2019-07-2314:15:00
PRIOn knowledge base
www.prio-n.com
3

6.1 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

45.0%

Activity Stream can display content from sent from the Snippet Service website. This content is written to innerHTML on the Activity Stream page without sanitization, allowing for a potential access to other information available to the Activity Stream, such as browsing history, if the Snipper Service were compromised. This vulnerability affects Firefox < 68.

CPENameOperatorVersion
firefoxlt68.0
leapeq15.0
leapeq15.1