CVE-2019-17003 — Cross-site Scripting in Mozilla Firefox

CWE-79 — Cross-site Scripting2 documents2 sources
Severity
6.1MEDIUMNVD
EPSS
0.1%
top 71.63%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Mozilla Firefox
Timeline
PublishedFeb 16
Latest updateFeb 17

Description

Scanning a QR code that contained a javascript: URL would have resulted in the Javascript being executed.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NExploitability: 2.8 | Impact: 2.7

Affected Packages1 packages

▶NVDmozilla/firefox25.0

🔴Vulnerability Details

1
GHSA
GHSA-2q49-5v6q-6qr6: Scanning a QR code that contained a javascript: URL would have resulted in the Javascript being executed↗2023-02-17
▶