{
  "cveId": "CVE-2019-11723",
  "url": "https://patchblox.com/security/cve/CVE-2019-11723",
  "summary": "CVE-2019-11723 is fixed in 4 products on 1 platform, first by firefox 68.0\u002Bbuild3-0ubuntu0.18.04.1, released July 10, 2019. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "firefox: A vulnerability exists during the installation of add-ons where the initial fetch ignored the origin attributes of th...",
  "description": "A vulnerability exists during the installation of add-ons where the initial fetch ignored the origin attributes of the browsing context. This could leak cookies in private browsing mode or across different \u0022containers\u0022 for people who use the Firefox Multi-Account Containers Web Extension. This vulnerability affects Firefox \u0026lt; 68.",
  "published": "2019-07-10T17:00:00Z",
  "severity": "Medium",
  "epss": 0.00807,
  "epssPercentile": 0.57067,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "firefox",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "68.0\u002Bbuild3-0ubuntu0.18.04.1",
      "fix": "firefox 68.0\u002Bbuild3-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-firefox-68.0-build3-0ubuntu0.18.04.1",
      "released": "2019-07-10T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox-geckodriver",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "68.0\u002Bbuild3-0ubuntu0.18.04.1",
      "fix": "firefox-geckodriver 68.0\u002Bbuild3-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-firefox-geckodriver-68.0-build3-0ubuntu0.18.04.1",
      "released": "2019-07-10T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox-globalmenu",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "68.0\u002Bbuild3-0ubuntu0.18.04.1",
      "fix": "firefox-globalmenu 68.0\u002Bbuild3-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-firefox-globalmenu-68.0-build3-0ubuntu0.18.04.1",
      "released": "2019-07-10T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox-mozsymbols",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "68.0\u002Bbuild3-0ubuntu0.18.04.1",
      "fix": "firefox-mozsymbols 68.0\u002Bbuild3-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-firefox-mozsymbols-68.0-build3-0ubuntu0.18.04.1",
      "released": "2019-07-10T17:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T06:59:42Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}