Due to an error while parsing page content, it is possible for properly sanitized user input to be misinterpreted and lead to XSS hazards on web sites in certain circumstances. This vulnerability affects Firefox ESR < 60.8, Firefox < 68, and Thunderbird < 60.8.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade firefox-esr | Nov 8, 2019 | Jul 23, 2019 |
| Amazon Linux Ami 2 | — | Upgrade thunderbird-debuginfoUpgrade thunderbird | Apr 27, 2020 | Jul 23, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 23, 2019 |
| Centos_linux | — | Upgrade firefox-debugsourceUpgrade thunderbird-debuginfoUpgrade thunderbirdUpgrade thunderbird-debugsourceUpgrade firefox-debuginfoUpgrade firefox | Jul 16, 2019 | Jul 9, 2019 |
| Debian | — | Upgrade thunderbirdUpgrade firefox-esr | Jul 15, 2019 | Jul 15, 2019 |
| Freebsd | — | Upgrade linux-firefoxUpgrade libxulUpgrade seamonkeyUpgrade waterfoxUpgrade linux-seamonkeyUpgrade firefox-esrUpgrade thunderbirdUpgrade firefoxUpgrade linux-thunderbird | Jul 11, 2019 | Jul 9, 2019 |
| Gentoo Linux | — | Upgrade mail-client/thunderbird-bin.Upgrade mail-client/thunderbird.Upgrade www-client/firefox-bin.Upgrade www-client/firefox. | Aug 16, 2019 | Jul 23, 2019 |
| Mfsa2019 21 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 68.0 | Jul 10, 2019 | Jul 9, 2019 |
| Mfsa2019 22 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox ESR version 60.8 | Jul 10, 2019 | Jul 9, 2019 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 68.0Upgrade to the latest version of Mozilla Thunderbird | Jul 12, 2019 | Jul 9, 2019 |
| Oracle Solaris | — | Upgrade web/browser/firefox to version 60.8.0-11.4.12.0.1.3.0 on Solaris 11.4Upgrade mail/thunderbird/plugin/thunderbird-lightning to version 60.8.0-11.4.12.0.1.3.0 on Solaris 11.4Upgrade mail/thunderbird to version 60.8.0-11.4.12.0.1.3.0 on Solaris 11.4Upgrade web/data/firefox-bookmarks to version 60.8.0-11.4.12.0.1.3.0 on Solaris 11.4 | Aug 21, 2019 | Jul 23, 2019 |
| Oracle_linux | — | Upgrade thunderbirdUpgrade firefox | Jul 12, 2019 | Jul 10, 2019 |
| Redhat_linux | — | No solution existsUpgrade thunderbird-debuginfoUpgrade firefox-debugsourceUpgrade firefox-debuginfoUpgrade firefoxUpgrade thunderbirdUpgrade thunderbird-debugsource | Jul 12, 2019 | Jul 11, 2019 |
| Suse | — | Upgrade mozilla-nspr-32bitUpgrade MozillaThunderbird-buildsymbolsUpgrade MozillaFirefox-branding-SLEDUpgrade firefox-libgtk-3-0Upgrade MozillaThunderbirdUpgrade firefox-gtk3-immodule-multipressUpgrade firefox-gtk3-immodule-thaiUpgrade mozilla-nss-toolsUpgrade firefox-gtk3-dataUpgrade firefox-gtk3-branding-upstreamUpgrade firefox-glib2-langUpgrade mozilla-nspr-develUpgrade firefox-gtk3-immodule-inuktitutUpgrade libsoftokn3Upgrade mozillafirefox-branding-sleUpgrade firefox-libgdk_pixbuf-2_0-0Upgrade MozillaFirefox-translations-commonUpgrade MozillaFirefox-develUpgrade MozillaFirefox-translations-otherUpgrade mozilla-nsprUpgrade mozilla-nss-develUpgrade firefox-libharfbuzz0Upgrade firefox-gtk3-immodules-tigrignaUpgrade mozilla-nss-sysinitUpgrade libfreebl3Upgrade libsoftokn3-32bitUpgrade MozillaThunderbird-translations-otherUpgrade mozilla-nss-sysinit-32bitUpgrade libfirefox-gthread-2_0-0Upgrade firefox-gio-branding-upstreamUpgrade mozillafirefox-buildsymbolsUpgrade mozilla-nss-certs-32bitUpgrade libfirefox-gio-2_0-0Upgrade firefox-gtk3-toolsUpgrade firefox-gdk-pixbuf-thumbnailerUpgrade firefox-glib2-toolsUpgrade libfreebl3-32bitUpgrade enigmailUpgrade libfirefox-glib-2_0-0Upgrade firefox-libcairo-gobject2Upgrade firefox-gtk3-immodule-vietnameseUpgrade mozilla-nss-certsUpgrade libfreebl3-hmacUpgrade MozillaFirefoxUpgrade firefox-atk-langUpgrade firefox-libffi4Upgrade firefox-gdk-pixbuf-query-loadersUpgrade MozillaThunderbird-translations-commonUpgrade firefox-gtk3-immodule-ximUpgrade firefox-gtk3-langUpgrade libfreebl3-hmac-32bitUpgrade libfirefox-gobject-2_0-0Upgrade firefox-libpango-1_0-0Upgrade libfirefox-gmodule-2_0-0Upgrade firefox-libcairo2Upgrade mozilla-nss-32bitUpgrade firefox-libatk-1_0-0Upgrade libsoftokn3-hmacUpgrade firefox-gtk3-immodule-amharicUpgrade mozilla-nssUpgrade libsoftokn3-hmac-32bitUpgrade firefox-gdk-pixbuf-langUpgrade firefox-libffi7Upgrade mozillafirefox-branding-upstream | Jul 18, 2019 | Jul 9, 2019 |
| Ubuntu | — | Upgrade firefoxUpgrade thunderbird | Jul 13, 2019 | Jul 9, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub