CVE-2019-11699

MEDIUM

Firefox < 67.0 - Domain Spoofing via Address Bar Name Highlighting

Title source: llm
STIX 2.1

Description

A malicious page can briefly cause the wrong name to be highlighted as the domain name in the addressbar during page navigations. This could result in user confusion of which site is currently loaded for spoofing attacks. This vulnerability affects Firefox < 67.

References (2)

Core 2
Core References
Issue Tracking, Permissions Required, Vendor Advisory x_refsource_misc
https://bugzilla.mozilla.org/show_bug.cgi?id=1528939

Scores

CVSS v3 6.5
EPSS 0.0020
EPSS Percentile 42.1%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Details

Status published
Products (1)
mozilla/firefox < 67.0
Published Jul 23, 2019
Tracked Since Feb 18, 2026