VDB
DEBIAN-CVE-2019-11762
DEBIAN-CVE-2019-11762
PUBLISHED
CVSS 6.099999904632568 MEDIUM
If two same-origin documents set document.domain differently to become cross-origin, it was possible for them to call arbitrary DOM methods/getters/setters on the now-cross-origin window. This vulnerability affects Firefox < 70, Thunderbird < 68.2, and Firefox ESR < 68.2.
Risk Scores
CVSS 3.1
6.099999904632568
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:13 | firefox-esr | 0 |
| Debian:14 | thunderbird | 0 |
| Debian:13 | thunderbird | 0 |
| Debian:14 | firefox-esr | 0 |
| Debian:12 | firefox-esr | 0 |
| Debian:12 | thunderbird | 0 |
Timeline
- Jan 8, 2020 CVE Published
- Sep 21, 2026 CVE Updated