Application permissions give additional remote troubleshooting permission to the site input.mozilla.org, which has been retired and now redirects to another site. This additional permission is unnecessary and is a potential vector for malicious attacks. This vulnerability affects Firefox < 68.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 23, 2019 |
| Freebsd | — | Upgrade linux-seamonkeyUpgrade seamonkeyUpgrade firefox-esrUpgrade linux-firefoxUpgrade waterfoxUpgrade thunderbirdUpgrade libxulUpgrade firefoxUpgrade linux-thunderbird | Jul 11, 2019 | Jul 9, 2019 |
| Gentoo Linux | — | Upgrade www-client/firefox-bin.Upgrade www-client/firefox. | Aug 16, 2019 | Jul 23, 2019 |
| Mfsa2019 21 | — | Upgrade to Mozilla Firefox version 68.0 | Jul 10, 2019 | Jul 9, 2019 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 68.0 | Sep 11, 2019 | Jul 23, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 23, 2019 |
| Suse | — | Upgrade firefox-libatk-1_0-0Upgrade enigmailUpgrade firefox-gtk3-immodule-inuktitutUpgrade firefox-gtk3-immodule-thaiUpgrade firefox-gdk-pixbuf-thumbnailerUpgrade mozilla-nss-32bitUpgrade mozillathunderbirdUpgrade firefox-gtk3-immodule-amharicUpgrade firefox-libpango-1_0-0Upgrade firefox-gtk3-langUpgrade libfirefox-gio-2_0-0Upgrade firefox-glib2-langUpgrade libfreebl3-32bitUpgrade mozilla-nspr-32bitUpgrade mozilla-nss-certsUpgrade mozilla-nss-certs-32bitUpgrade firefox-glib2-toolsUpgrade mozillafirefoxUpgrade firefox-libgdk_pixbuf-2_0-0Upgrade mozillafirefox-branding-sleUpgrade MozillaThunderbird-buildsymbolsUpgrade firefox-libcairo2Upgrade mozillafirefox-translations-commonUpgrade mozillafirefox-develUpgrade mozillathunderbird-translations-otherUpgrade libsoftokn3Upgrade firefox-gtk3-immodule-vietnameseUpgrade mozilla-nss-develUpgrade mozilla-nss-toolsUpgrade mozillafirefox-translations-otherUpgrade mozillathunderbird-translations-commonUpgrade libfirefox-glib-2_0-0Upgrade firefox-atk-langUpgrade firefox-gdk-pixbuf-query-loadersUpgrade firefox-gtk3-dataUpgrade firefox-libffi4Upgrade libfirefox-gobject-2_0-0Upgrade mozillafirefox-buildsymbolsUpgrade firefox-gtk3-immodules-tigrignaUpgrade libfirefox-gmodule-2_0-0Upgrade mozilla-nspr-develUpgrade firefox-gtk3-immodule-ximUpgrade libfirefox-gthread-2_0-0Upgrade mozilla-nsprUpgrade firefox-libharfbuzz0Upgrade mozillafirefox-branding-upstreamUpgrade firefox-libffi7Upgrade libsoftokn3-32bitUpgrade mozillafirefox-branding-sledUpgrade firefox-gdk-pixbuf-langUpgrade firefox-gtk3-immodule-multipressUpgrade libfreebl3Upgrade firefox-gtk3-toolsUpgrade firefox-libgtk-3-0Upgrade firefox-libcairo-gobject2Upgrade mozilla-nssUpgrade firefox-gtk3-branding-upstreamUpgrade firefox-gio-branding-upstream | Oct 8, 2019 | Jul 9, 2019 |
| Ubuntu | — | Upgrade firefox | Jul 13, 2019 | Jul 9, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub