Security Advisory

CVE-2019-17016

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-01-08 21:27:03
Last updated 2024-08-05 01:24:48
Assigner mozilla
State PUBLISHED

Description

When pasting a &lt;style&gt; tag from the clipboard into a rich text editor, the CSS sanitizer incorrectly rewrites a @namespace rule. This could allow for injection into certain types of websites resulting in data exfiltration. This vulnerability affects Firefox ESR < 68.4 and Firefox < 72.

← Browse all CVEs View on cve.org ↗