CVE-2019-9807

CVSS v3.0 4.3 (Medium)

CVSS v2.0 4.3 (Medium)

EPSS 0.11 % (45^th)

Affected Products 1

Advisories 5

When arbitrary text is sent over an FTP connection and a page reload is initiated, it is possible to create a modal alert message with this text as the content. This could potentially be used for social engineering attacks. This vulnerability affects Firefox < 66.

Weaknesses

CWE-20: Improper Input Validation

CVE Status: PUBLISHED
CNA: Mozilla Corporation
Published Date: 2019-04-26 17:29:03
(5 years ago)
Updated Date: 2019-04-29 19:17:59
(5 years ago)

Affected Products

Mozilla

Firefox

Configuration #1

		CPE23	From	Up To
	Mozilla Firefox prior 66.0 version	cpe:2.3:a:mozilla:firefox		< 66.0