Description
Activity Stream can display content from sent from the Snippet Service website. This content is written to innerHTML on the Activity Stream page without sanitization, allowing for a potential access to other information available to the Activity Stream, such as browsing history, if the Snipper Service were compromised. This vulnerability affects Firefox < 68.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NExploitability: 3.9 | Impact: 1.4Attack Vector: Network
Complexity: Low
Privileges: None
User Interaction: None
Scope: Unchanged
Confidentiality: Low
Integrity: None
Availability: None
Affected Packages5 packages
🔴Vulnerability Details
4GHSAGHSA-qp25-xm2x-r33g: Activity Stream can display content from sent from the Snippet Service website↗2022-05-24 OSVfirefox regressions↗2019-07-25 OSVfirefox vulnerabilities↗2019-07-12 OSVCVE-2019-11718: Activity Stream can display content from sent from the Snippet Service website↗2019-07-11 📋Vendor Advisories
4UbuntuFirefox regressions↗2019-07-25 UbuntuFirefox vulnerabilities↗2019-07-12 Red HatMozilla: Activity Stream writes unsanitized content to innerHTML↗2019-07-09 DebianCVE-2019-11718: firefox - Activity Stream can display content from sent from the Snippet Service website. ...↗2019 💬Community
1BugzillaCVE-2019-11718 Mozilla: Activity Stream writes unsanitized content to innerHTML↗2019-07-18