Application permissions give additional remote troubleshooting permission to the site input.mozilla.org, which has been retired and now redirects to another site. This additional permission is unnecessary and is a potential vector for malicious attacks. This vulnerability affects Firefox < 68.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 23, 2019 |
| Freebsd | — | Upgrade thunderbirdUpgrade linux-firefoxUpgrade waterfoxUpgrade linux-seamonkeyUpgrade seamonkeyUpgrade firefox-esrUpgrade libxulUpgrade linux-thunderbirdUpgrade firefox | Jul 11, 2019 | Jul 9, 2019 |
| Gentoo Linux | — | Upgrade www-client/firefox-bin.Upgrade www-client/firefox. | Aug 16, 2019 | Jul 23, 2019 |
| Mfsa2019 21 | — | Upgrade to Mozilla Firefox version 68.0 | Jul 10, 2019 | Jul 9, 2019 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 68.0 | Sep 11, 2019 | Jul 23, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 23, 2019 |
| Suse | — | Upgrade mozilla-nss-certsUpgrade mozillathunderbird-translations-commonUpgrade mozillathunderbird-translations-otherUpgrade mozillafirefox-develUpgrade firefox-libcairo2Upgrade firefox-gtk3-immodule-vietnameseUpgrade firefox-glib2-langUpgrade MozillaThunderbird-buildsymbolsUpgrade mozillafirefoxUpgrade libfirefox-glib-2_0-0Upgrade libfreebl3-32bitUpgrade firefox-gtk3-immodule-amharicUpgrade firefox-gtk3-langUpgrade firefox-glib2-toolsUpgrade firefox-libpango-1_0-0Upgrade mozilla-nss-32bitUpgrade mozilla-nss-toolsUpgrade mozilla-nspr-32bitUpgrade mozilla-nss-develUpgrade firefox-libgdk_pixbuf-2_0-0Upgrade mozillafirefox-translations-commonUpgrade firefox-gtk3-immodule-inuktitutUpgrade mozillathunderbirdUpgrade enigmailUpgrade mozilla-nss-certs-32bitUpgrade firefox-libatk-1_0-0Upgrade mozillafirefox-branding-sleUpgrade libfirefox-gio-2_0-0Upgrade libsoftokn3Upgrade firefox-gdk-pixbuf-thumbnailerUpgrade mozillafirefox-translations-otherUpgrade firefox-gtk3-immodule-thaiUpgrade firefox-libffi4Upgrade libfirefox-gthread-2_0-0Upgrade libfirefox-gobject-2_0-0Upgrade mozilla-nssUpgrade firefox-libharfbuzz0Upgrade mozillafirefox-branding-upstreamUpgrade firefox-gtk3-branding-upstreamUpgrade firefox-gtk3-immodule-multipressUpgrade mozillafirefox-branding-sledUpgrade firefox-libcairo-gobject2Upgrade libsoftokn3-32bitUpgrade firefox-gtk3-immodule-ximUpgrade firefox-gtk3-dataUpgrade firefox-gtk3-toolsUpgrade libfreebl3Upgrade firefox-gdk-pixbuf-query-loadersUpgrade firefox-libgtk-3-0Upgrade firefox-atk-langUpgrade mozilla-nsprUpgrade firefox-gtk3-immodules-tigrignaUpgrade mozillafirefox-buildsymbolsUpgrade mozilla-nspr-develUpgrade libfirefox-gmodule-2_0-0Upgrade firefox-gio-branding-upstreamUpgrade firefox-libffi7Upgrade firefox-gdk-pixbuf-lang | Oct 8, 2019 | Jul 9, 2019 |
| Ubuntu | — | Upgrade firefox | Jul 13, 2019 | Jul 9, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub