Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2019-11754

Опубликовано: 27 сент. 2019
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 4.3
CVSS3: 4.3

Описание

When the pointer lock is enabled by a website though requestPointerLock(), no user notification is given. This could allow a malicious website to hijack the mouse pointer and confuse users. This vulnerability affects Firefox < 69.0.1.

РелизСтатусПримечание
bionic

released

69.0.1+build1-0ubuntu0.18.04.1
devel

released

69.0.1+build1-0ubuntu2
disco

released

69.0.1+build1-0ubuntu0.19.04.1
eoan

released

69.0.1+build1-0ubuntu2
esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

focal

released

69.0.1+build1-0ubuntu2
groovy

released

69.0.1+build1-0ubuntu2
hirsute

released

69.0.1+build1-0ubuntu2
impish

released

69.0.1+build1-0ubuntu2

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support, was needs-triage
devel

DNE

disco

DNE

eoan

DNE

esm-apps/bionic

ignored

esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

focal

DNE

groovy

DNE

hirsute

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support, was needs-triage
devel

DNE

disco

ignored

end of life
eoan

ignored

end of life
esm-apps/focal

ignored

esm-infra-legacy/trusty

DNE

esm-infra/bionic

ignored

focal

ignored

groovy

ignored

end of life
hirsute

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

disco

ignored

end of life
eoan

ignored

end of life
esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

focal

DNE

groovy

DNE

hirsute

DNE

impish

DNE

Показывать по

EPSS

Процентиль: 40%
0.00186
Низкий

4.3 Medium

CVSS2

4.3 Medium

CVSS3

Связанные уязвимости

CVSS3: 4.3
redhat
больше 6 лет назад

When the pointer lock is enabled by a website though requestPointerLock(), no user notification is given. This could allow a malicious website to hijack the mouse pointer and confuse users. This vulnerability affects Firefox < 69.0.1.

CVSS3: 4.3
nvd
больше 6 лет назад

When the pointer lock is enabled by a website though requestPointerLock(), no user notification is given. This could allow a malicious website to hijack the mouse pointer and confuse users. This vulnerability affects Firefox < 69.0.1.

CVSS3: 4.3
debian
больше 6 лет назад

When the pointer lock is enabled by a website though requestPointerLoc ...

github
больше 3 лет назад

When the pointer lock is enabled by a website though requestPointerLock(), no user notification is given. This could allow a malicious website to hijack the mouse pointer and confuse users. This vulnerability affects Firefox < 69.0.1.

CVSS3: 4.3
fstec
больше 6 лет назад

Уязвимость функции requestPointerLock() веб-браузера Firefox, позволяющая нарушителю оказать воздействие на целостность данных

EPSS

Процентиль: 40%
0.00186
Низкий

4.3 Medium

CVSS2

4.3 Medium

CVSS3

Уязвимость CVE-2019-11754