CVE-2019-11721

CVSS v3.1 6.5 (Medium)

CVSS v2.0 4.3 (Medium)

EPSS 0.79 % (82^th)

Affected Products 2

Advisories 13

The unicode latin 'kra' character can be used to spoof a standard 'k' character in the addressbar. This allows for domain spoofing attacks as do not display as punycode text, allowing for user confusion. This vulnerability affects Firefox < 68.

Weaknesses

CWE-NVD-noinfo

CVE Status: PUBLISHED
CNA: Mozilla Corporation
Published Date: 2019-07-23 14:15:16
(5 years ago)
Updated Date: 2023-03-02 16:25:03
(18 months ago)

Affected Products

Mozilla

Firefox

Opensuse

Leap

Configuration #1

		CPE23	From	Up To
	Mozilla Firefox prior 68.0 version	cpe:2.3:a:mozilla:firefox		< 68.0

Configuration #2

		CPE23	From	Up To
	Opensuse Leap 15.0	cpe:2.3:o:opensuse:leap:15.0
	Opensuse Leap 15.1	cpe:2.3:o:opensuse:leap:15.1