cbcvebase.
CVE-2019-17022
published 2020-01-08

CVE-2019-17022: When pasting a tag from the clipboard into a rich text editor, the CSS sanitizer does not escape characters. Because the resulting string is pasted directly…

PriorityP425medium6.1CVSS 3.1
AVNACLPRNUIRSCCLILAN
EPSS
1.99%
78.4th percentile
When pasting a tag from the clipboard into a rich text editor, the CSS sanitizer does not escape characters. Because the resulting string is pasted directly into the text node of the element this does not result in a direct injection into the webpage; however, if a webpage subsequently copies the node's innerHTML, assigning it to another innerHTML, this would result in an XSS vulnerability. Two WYSIWYG editors were identified with this behavior, more may exist. This vulnerability affects Firefox ESR < 68.4 and Firefox < 72.

Affected

29 ranges· showing 25
VendorProductVersion rangeFixed in
canonicalubuntu_linux
canonicalubuntu_linux
canonicalubuntu_linux
canonicalubuntu_linux
debiandebian_linux
debiandebian_linux
debiandebian_linux
debianfirefox< firefox 72.0-1 (sid)firefox 72.0-1 (sid)
debianfirefox-esr< firefox 72.0-1 (sid)firefox 72.0-1 (sid)
debianthunderbird< firefox 72.0-1 (sid)firefox 72.0-1 (sid)
mozillafirefox< 72.072.0
mozillafirefox
mozillafirefox
mozillafirefox_esr< 68.468.4
mozillafirefox_esr
mozillathunderbird>= 0 < 1:68.4.1-11:68.4.1-1
mozillathunderbird>= 0 < 1:68.4.1-11:68.4.1-1
mozillathunderbird>= 0 < 1:68.4.1-11:68.4.1-1
mozillathunderbird>= 0 < 1:68.4.1-11:68.4.1-1
mozillathunderbird>= 0 < 1:68.7.0+build1-0ubuntu0.16.04.21:68.7.0+build1-0ubuntu0.16.04.2
mozillathunderbird>= 0 < 1:68.4.1+build1-0ubuntu0.18.04.11:68.4.1+build1-0ubuntu0.18.04.1
redhatenterprise_linux_desktop
redhatenterprise_linux_desktop
redhatenterprise_linux_server
redhatenterprise_linux_server

CVSS provenance

nvdv3.16.1MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
osv8.8HIGH
vendor_ubuntu8.8HIGH
vendor_debian6.1MEDIUM
vendor_redhat6.1MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.