Application permissions give additional remote troubleshooting permission to the site input.mozilla.org, which has been retired and now redirects to another site. This additional permission is unnecessary and is a potential vector for malicious attacks. This vulnerability affects Firefox < 68.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 23, 2019 |
| Freebsd | — | Upgrade libxulUpgrade linux-thunderbirdUpgrade firefoxUpgrade seamonkeyUpgrade firefox-esrUpgrade linux-seamonkeyUpgrade linux-firefoxUpgrade waterfoxUpgrade thunderbird | Jul 11, 2019 | Jul 9, 2019 |
| Gentoo Linux | — | Upgrade www-client/firefox.Upgrade www-client/firefox-bin. | Aug 16, 2019 | Jul 23, 2019 |
| Mfsa2019 21 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 68.0 | Jul 10, 2019 | Jul 9, 2019 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 68.0Upgrade to the latest version of Mozilla Thunderbird | Sep 11, 2019 | Jul 23, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 23, 2019 |
| Suse | — | Upgrade firefox-gtk3-langUpgrade MozillaThunderbird-buildsymbolsUpgrade enigmailUpgrade libfirefox-gio-2_0-0Upgrade firefox-libpango-1_0-0Upgrade mozilla-nspr-32bitUpgrade firefox-gdk-pixbuf-thumbnailerUpgrade mozilla-nss-32bitUpgrade firefox-gtk3-immodule-inuktitutUpgrade firefox-libatk-1_0-0Upgrade firefox-glib2-toolsUpgrade mozillafirefox-branding-sleUpgrade firefox-libcairo2Upgrade libfreebl3-32bitUpgrade firefox-gtk3-immodule-vietnameseUpgrade MozillaFirefox-translations-otherUpgrade mozilla-nss-certsUpgrade firefox-glib2-langUpgrade mozilla-nss-certs-32bitUpgrade MozillaFirefoxUpgrade firefox-gtk3-immodule-thaiUpgrade mozilla-nss-develUpgrade libsoftokn3Upgrade mozilla-nss-toolsUpgrade firefox-libgdk_pixbuf-2_0-0Upgrade libfirefox-glib-2_0-0Upgrade firefox-gtk3-immodule-amharicUpgrade mozillafirefox-buildsymbolsUpgrade MozillaThunderbird-translations-commonUpgrade libfirefox-gthread-2_0-0Upgrade libsoftokn3-32bitUpgrade firefox-gtk3-immodules-tigrignaUpgrade mozilla-nssUpgrade firefox-libcairo-gobject2Upgrade mozillafirefox-branding-upstreamUpgrade firefox-libharfbuzz0Upgrade MozillaThunderbirdUpgrade firefox-gdk-pixbuf-langUpgrade mozilla-nsprUpgrade MozillaFirefox-translations-commonUpgrade firefox-gtk3-immodule-multipressUpgrade mozilla-nspr-develUpgrade firefox-gtk3-branding-upstreamUpgrade MozillaThunderbird-translations-otherUpgrade MozillaFirefox-develUpgrade libfirefox-gmodule-2_0-0Upgrade firefox-gio-branding-upstreamUpgrade MozillaFirefox-branding-SLEDUpgrade firefox-libffi7Upgrade firefox-gtk3-immodule-ximUpgrade firefox-libgtk-3-0Upgrade libfreebl3Upgrade firefox-gdk-pixbuf-query-loadersUpgrade firefox-atk-langUpgrade firefox-gtk3-dataUpgrade firefox-gtk3-toolsUpgrade libfirefox-gobject-2_0-0Upgrade firefox-libffi4 | Oct 8, 2019 | Jul 9, 2019 |
| Ubuntu | — | Upgrade firefox | Jul 13, 2019 | Jul 9, 2019 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub