CVE-2019-11730

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

A vulnerability exists where if a user opens a locally saved HTML file, this file can use file: URIs to access other files in the same directory or sub-directories if the names are known or guessed. The Fetch API can then be used to read the contents of any files stored in these directories and they may uploaded to a server. It was demonstrated that in combination with a popular Android messaging app, if a malicious HTML attachment is sent to a user and they opened that attachment in Firefox, due to that app's predictable pattern for locally-saved file names, it is possible to read attachments the victim received from other correspondents. This vulnerability affects Firefox ESR < 60.8, Firefox < 68, and Thunderbird < 60.8.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published
Jul 23, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-117339.8When a master password is set, it is required to be entered again before stored passwords can be accessed in the 'Saved Logins' dialog. It wCVE-2019-117349.8Mozilla developers and community members reported memory safety bugs present in Firefox 68. Some of these bugs showed evidence of memory corCVE-2019-117358.8Mozilla developers and community members reported memory safety bugs present in Firefox 68 and Firefox ESR 68. Some of these bugs showed eviCVE-2019-117367.0The Mozilla Maintenance Service does not guard against files being hardlinked to another file in the updates directory, allowing for the repCVE-2019-117375.3If a wildcard ('*') is specified for the host in Content Security Policy (CSP) directives, any port or path restriction of the directive wilCVE-2019-117386.3If a Content Security Policy (CSP) directive is defined that uses a hash-based source that takes the empty string as input, execution of anyCVE-2019-117396.5Encrypted S/MIME parts in a crafted multipart/alternative message can leak plaintext when included in a a HTML reply/forward. This vulnerabiCVE-2019-11747.0An elevation of privilege vulnerability exists in the way that the PsmServiceExtHost.dll handles objects in memory. An attacker who successfCVE-2019-117408.8Mozilla developers and community members reported memory safety bugs present in Firefox 68, Firefox ESR 68, and Firefox 60.8. Some of these CVE-2019-117416.1A compromised sandboxed content process can perform a Universal Cross-site Scripting (UXSS) attack on content from any site it can cause to CVE-2019-117426.5A same-origin policy violation occurs allowing the theft of cross-origin images through a combination of SVG filters and a &lt;canvas&gt; elCVE-2019-117433.7Navigation events were not fully adhering to the W3C's "Navigation-Timing Level 2" draft specification in some instances for the unload even