Application permissions give additional remote troubleshooting permission to the site input.mozilla.org, which has been retired and now redirects to another site. This additional permission is unnecessary and is a potential vector for malicious attacks. This vulnerability affects Firefox < 68.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 23, 2019 |
| Freebsd | — | Upgrade linux-seamonkeyUpgrade firefox-esrUpgrade seamonkeyUpgrade linux-firefoxUpgrade waterfoxUpgrade thunderbirdUpgrade libxulUpgrade firefoxUpgrade linux-thunderbird | Jul 11, 2019 | Jul 9, 2019 |
| Gentoo Linux | — | Upgrade www-client/firefox-bin.Upgrade www-client/firefox. | Aug 16, 2019 | Jul 23, 2019 |
| Mfsa2019 21 | — | Upgrade to Mozilla Firefox version 68.0Upgrade to the latest version of Mozilla Firefox | Jul 10, 2019 | Jul 9, 2019 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 68.0Upgrade to the latest version of Mozilla Thunderbird | Sep 11, 2019 | Jul 23, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 23, 2019 |
| Suse | — | Upgrade firefox-gtk3-immodule-ximUpgrade firefox-gtk3-toolsUpgrade firefox-atk-langUpgrade libfirefox-gthread-2_0-0Upgrade mozillafirefox-buildsymbolsUpgrade MozillaThunderbird-translations-commonUpgrade firefox-libcairo-gobject2Upgrade MozillaFirefox-branding-SLEDUpgrade firefox-gtk3-immodule-multipressUpgrade MozillaThunderbirdUpgrade firefox-libffi4Upgrade firefox-libharfbuzz0Upgrade mozilla-nsprUpgrade firefox-gio-branding-upstreamUpgrade MozillaFirefox-translations-commonUpgrade mozilla-nspr-develUpgrade libfirefox-gmodule-2_0-0Upgrade libfreebl3Upgrade mozilla-nssUpgrade MozillaThunderbird-translations-otherUpgrade MozillaFirefox-develUpgrade firefox-gtk3-branding-upstreamUpgrade mozillafirefox-branding-upstreamUpgrade firefox-libffi7Upgrade firefox-gdk-pixbuf-langUpgrade libsoftokn3-32bitUpgrade firefox-gtk3-immodules-tigrignaUpgrade firefox-libgtk-3-0Upgrade firefox-gdk-pixbuf-query-loadersUpgrade firefox-gtk3-dataUpgrade libfirefox-gobject-2_0-0Upgrade mozilla-nspr-32bitUpgrade firefox-gtk3-immodule-thaiUpgrade libfirefox-gio-2_0-0Upgrade libfirefox-glib-2_0-0Upgrade firefox-gtk3-immodule-vietnameseUpgrade firefox-libcairo2Upgrade enigmailUpgrade mozilla-nss-toolsUpgrade firefox-libgdk_pixbuf-2_0-0Upgrade firefox-libatk-1_0-0Upgrade firefox-gtk3-immodule-amharicUpgrade firefox-gtk3-langUpgrade firefox-gdk-pixbuf-thumbnailerUpgrade firefox-glib2-langUpgrade libfreebl3-32bitUpgrade mozillafirefox-branding-sleUpgrade firefox-gtk3-immodule-inuktitutUpgrade firefox-libpango-1_0-0Upgrade libsoftokn3Upgrade mozilla-nss-32bitUpgrade mozilla-nss-develUpgrade MozillaFirefoxUpgrade mozilla-nss-certs-32bitUpgrade MozillaThunderbird-buildsymbolsUpgrade firefox-glib2-toolsUpgrade MozillaFirefox-translations-otherUpgrade mozilla-nss-certs | Oct 8, 2019 | Jul 9, 2019 |
| Ubuntu | — | Upgrade firefox | Jul 13, 2019 | Jul 9, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub