CVE-2019-11720: XSS
Some unicode characters are incorrectly treated as whitespace during the parsing of web content instead of triggering parsing errors. This allows malicious code to then be processed, evading cross-site scripting (XSS) filtering.
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is CVE-2019-11720?
CVE-2019-11720 is a vulnerability that allows malicious code to be processed in web content, evading cross-site scripting (XSS) filtering.
Which software is affected by CVE-2019-11720?
CVE-2019-11720 affects Mozilla Firefox versions up to and excluding version 68, as well as Mozilla Thunderbird, openSUSE Leap 15.0, and openSUSE Leap 15.1.
What is the severity of CVE-2019-11720?
The severity of CVE-2019-11720 is medium, with a CVSS score of 6.1.
How does CVE-2019-11720 work?
CVE-2019-11720 incorrectly treats some unicode characters as whitespace during web content parsing, allowing malicious code to evade XSS filtering.
How can I fix CVE-2019-11720?
To fix CVE-2019-11720, update your Mozilla Firefox or Mozilla Thunderbird to version 68 or above.