Application permissions give additional remote troubleshooting permission to the site input.mozilla.org, which has been retired and now redirects to another site. This additional permission is unnecessary and is a potential vector for malicious attacks. This vulnerability affects Firefox < 68.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 23, 2019 |
| Freebsd | — | Upgrade thunderbirdUpgrade firefox-esrUpgrade seamonkeyUpgrade linux-firefoxUpgrade waterfoxUpgrade linux-seamonkeyUpgrade libxulUpgrade linux-thunderbirdUpgrade firefox | Jul 11, 2019 | Jul 9, 2019 |
| Gentoo Linux | — | Upgrade www-client/firefox.Upgrade www-client/firefox-bin. | Aug 16, 2019 | Jul 23, 2019 |
| Mfsa2019 21 | — | Upgrade to Mozilla Firefox version 68.0 | Jul 10, 2019 | Jul 9, 2019 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 68.0 | Sep 11, 2019 | Jul 23, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 23, 2019 |
| Suse | — | Upgrade firefox-libgdk_pixbuf-2_0-0Upgrade mozillafirefox-translations-commonUpgrade mozillafirefox-translations-otherUpgrade mozilla-nspr-32bitUpgrade firefox-gtk3-immodule-inuktitutUpgrade firefox-libpango-1_0-0Upgrade firefox-gtk3-immodule-amharicUpgrade libfirefox-glib-2_0-0Upgrade enigmailUpgrade libfirefox-gio-2_0-0Upgrade mozilla-nss-certsUpgrade mozilla-nss-32bitUpgrade firefox-gtk3-langUpgrade firefox-glib2-toolsUpgrade firefox-libcairo2Upgrade mozilla-nss-toolsUpgrade mozilla-nss-certs-32bitUpgrade mozillafirefoxUpgrade mozillathunderbirdUpgrade libsoftokn3Upgrade MozillaThunderbird-buildsymbolsUpgrade mozillathunderbird-translations-otherUpgrade mozillafirefox-branding-sleUpgrade firefox-gtk3-immodule-vietnameseUpgrade firefox-gdk-pixbuf-thumbnailerUpgrade firefox-gtk3-immodule-thaiUpgrade mozillathunderbird-translations-commonUpgrade firefox-glib2-langUpgrade mozillafirefox-develUpgrade firefox-libatk-1_0-0Upgrade mozilla-nss-develUpgrade libfreebl3-32bitUpgrade libfreebl3Upgrade firefox-gtk3-immodules-tigrignaUpgrade mozillafirefox-branding-upstreamUpgrade firefox-gtk3-immodule-ximUpgrade firefox-gtk3-branding-upstreamUpgrade mozillafirefox-branding-sledUpgrade libfirefox-gthread-2_0-0Upgrade mozilla-nsprUpgrade mozilla-nssUpgrade firefox-libcairo-gobject2Upgrade firefox-libffi4Upgrade firefox-libharfbuzz0Upgrade libsoftokn3-32bitUpgrade firefox-gtk3-dataUpgrade mozilla-nspr-develUpgrade libfirefox-gmodule-2_0-0Upgrade firefox-gio-branding-upstreamUpgrade firefox-libgtk-3-0Upgrade firefox-gtk3-toolsUpgrade firefox-gtk3-immodule-multipressUpgrade firefox-libffi7Upgrade firefox-gdk-pixbuf-langUpgrade firefox-atk-langUpgrade mozillafirefox-buildsymbolsUpgrade firefox-gdk-pixbuf-query-loadersUpgrade libfirefox-gobject-2_0-0 | Oct 8, 2019 | Jul 9, 2019 |
| Ubuntu | — | Upgrade firefox | Jul 13, 2019 | Jul 9, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub