CVE-2019-11721

Advisory lineage Upstream: 0 Downstream: 14
Modified
Published: 23 Jul 2019, 13:17
Last modified:04 Aug 2024, 23:03

Vulnerability Summary

Overall Risk (default)
medium
36/100
CVSS Score
6.5 MEDIUM
v3.1 (nvd)
EPSS Score
0.56% LOW
1% probability -0.01%
KEV
Not listed
Ransomware
No reports
Public exploits
1 found
Dark Web
Not detected

Timeline

23 Jul 2019, 13:17
Published
Vulnerability first disclosed
04 Aug 2024, 23:03
Last Modified
Vulnerability information updated

Description

The unicode latin 'kra' character can be used to spoof a standard 'k' character in the addressbar. This allows for domain spoofing attacks as do not display as punycode text, allowing for user confusion. This vulnerability affects Firefox < 68.

CVSS Metrics

  • v3.1•MEDIUM•Score: 6.5CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
  • v2.0•MEDIUM•Score: 4.3AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS Trends

Current EPSS score: 0.56%• Percentile: 69%

Affected Systems

  • mozilla•firefox

    < 68.0 | ≥ unspecified, < 68

  • opensuse•leap

    15.0 | 15.1

References (7)