CVE Vulnerability

CVE-2019-11730

A vulnerability exists where if a user opens a locally saved HTML file, this file can use file: URIs to access other files in the same directory or sub-directories if the names are known or guessed. The Fetch API can then be used to read the contents of any files stored in these directories and they may uploaded to a server. It was demonstrated that in combination with a popular Android messaging app, if a malicious HTML attachment is sent to a user and they opened that attachment in Firefox, due to that app's predictable pattern for locally-saved file names, it is possible to read attachments the victim received from other correspondents. This vulnerability affects Firefox ESR < 60.8, Firefox < 68, and Thunderbird < 60.8.

4.3 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 8.6 / Impact : 2.9

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

Scope

6.5 /10

CVSS v3.0 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://www.mozilla.org/security/advisories/mfsa2019-21/ Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2019-22/ Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1558299 Issue Tracking Permissions Required
https://www.mozilla.org/security/advisories/mfsa2019-23/ Vendor Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00055.html Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00058.html Mailing List Third Party Advisory
https://lists.debian.org/debian-lts-announce/2019/08/msg00002.html Mailing List Third Party Advisory
https://lists.debian.org/debian-lts-announce/2019/08/msg00001.html Mailing List Third Party Advisory
https://security.gentoo.org/glsa/201908-12 Third Party Advisory
https://security.gentoo.org/glsa/201908-20 Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00073.html Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00009.html Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00010.html Mailing List Third Party Advisory
Configurations

Configuration 1

cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*
Information

Published : 2019-07-23 02:15

Updated : 2023-01-31 02:13

NVD link : CVE-2019-11730

Mitre link : CVE-2019-11730

Products Affected

Package Hub

Suse

CWE
NVD-CWE-noinfo