Application permissions give additional remote troubleshooting permission to the site input.mozilla.org, which has been retired and now redirects to another site. This additional permission is unnecessary and is a potential vector for malicious attacks. This vulnerability affects Firefox < 68.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 23, 2019 |
| Freebsd | — | Upgrade firefoxUpgrade libxulUpgrade linux-thunderbirdUpgrade waterfoxUpgrade firefox-esrUpgrade seamonkeyUpgrade thunderbirdUpgrade linux-firefoxUpgrade linux-seamonkey | Jul 11, 2019 | Jul 9, 2019 |
| Gentoo Linux | — | Upgrade www-client/firefox.Upgrade www-client/firefox-bin. | Aug 16, 2019 | Jul 23, 2019 |
| Mfsa2019 21 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 68.0 | Jul 10, 2019 | Jul 9, 2019 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 68.0Upgrade to the latest version of Mozilla Thunderbird | Sep 11, 2019 | Jul 23, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 23, 2019 |
| Suse | — | Upgrade firefox-gtk3-branding-upstreamUpgrade mozilla-nsprUpgrade firefox-gtk3-immodule-multipressUpgrade firefox-gdk-pixbuf-langUpgrade MozillaFirefox-branding-SLEDUpgrade firefox-libffi7Upgrade libsoftokn3-32bitUpgrade firefox-gio-branding-upstreamUpgrade libfirefox-gmodule-2_0-0Upgrade mozilla-nspr-develUpgrade firefox-atk-langUpgrade firefox-gdk-pixbuf-query-loadersUpgrade MozillaFirefox-translations-commonUpgrade firefox-libgtk-3-0Upgrade mozillafirefox-branding-upstreamUpgrade firefox-gtk3-immodule-ximUpgrade MozillaThunderbird-translations-otherUpgrade firefox-libharfbuzz0Upgrade mozillafirefox-buildsymbolsUpgrade libfreebl3Upgrade firefox-gtk3-toolsUpgrade firefox-gtk3-dataUpgrade libfirefox-gobject-2_0-0Upgrade mozilla-nssUpgrade firefox-gtk3-immodules-tigrignaUpgrade firefox-libffi4Upgrade MozillaFirefox-develUpgrade firefox-libcairo-gobject2Upgrade MozillaThunderbird-translations-commonUpgrade MozillaThunderbirdUpgrade libfirefox-gthread-2_0-0Upgrade firefox-libcairo2Upgrade libfirefox-glib-2_0-0Upgrade firefox-glib2-toolsUpgrade MozillaFirefox-translations-otherUpgrade firefox-gtk3-langUpgrade libfreebl3-32bitUpgrade firefox-libgdk_pixbuf-2_0-0Upgrade firefox-gtk3-immodule-amharicUpgrade mozilla-nss-certsUpgrade mozilla-nss-toolsUpgrade mozillafirefox-branding-sleUpgrade libsoftokn3Upgrade firefox-glib2-langUpgrade firefox-gtk3-immodule-vietnameseUpgrade firefox-libpango-1_0-0Upgrade firefox-gtk3-immodule-inuktitutUpgrade mozilla-nspr-32bitUpgrade mozilla-nss-32bitUpgrade libfirefox-gio-2_0-0Upgrade MozillaFirefoxUpgrade mozilla-nss-certs-32bitUpgrade mozilla-nss-develUpgrade firefox-gdk-pixbuf-thumbnailerUpgrade firefox-libatk-1_0-0Upgrade enigmailUpgrade firefox-gtk3-immodule-thaiUpgrade MozillaThunderbird-buildsymbols | Oct 8, 2019 | Jul 9, 2019 |
| Ubuntu | — | Upgrade firefox | Jul 13, 2019 | Jul 9, 2019 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub