CVE-2019-17022
Description
When pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer does not escape < and > characters. Because the resulting string is pasted directly into the text node of the element this does not result in a direct injection into the webpage; however, if a webpage subsequently copies the node's innerHTML, assigning it to another innerHTML, this would result in an XSS vulnerability. Two WYSIWYG editors were identified with this behavior, more may exist. This vulnerability affects Firefox ESR < 68.4 and Firefox < 72.
How to fix
- mozilla firefox72.0 or later
- mozilla firefox_esr68.4 or later
- debian.org/security/2020/dsa-4600
- usn.ubuntu.com/4234-1/
- access.redhat.com/errata/RHSA-2020:0085
- access.redhat.com/errata/RHSA-2020:0086
- access.redhat.com/errata/RHSA-2020:0111
- access.redhat.com/errata/RHSA-2020:0120
- access.redhat.com/errata/RHSA-2020:0123
- access.redhat.com/errata/RHSA-2020:0127
- usn.ubuntu.com/4241-1/
- debian.org/security/2020/dsa-4603
- access.redhat.com/errata/RHSA-2020:0292
- access.redhat.com/errata/RHSA-2020:0295
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla firefox | v < 72.0 | 72.0 |
| mozilla firefox_esr | v < 68.4 | 68.4 |
| canonical ubuntu_linux | 16.04, 18.04, 19.04, 19.10 | — |
| debian debian_linux | 8.0, 9.0, 10.0 | — |
| redhat enterprise_linux_desktop | 6.0, 7.0 | — |
| redhat enterprise_linux_server | 6.0, 7.0 | — |
| redhat enterprise_linux_server_aus | 7.7 | — |
| redhat enterprise_linux_server_tus | 7.7 | — |
| redhat enterprise_linux_workstation | 6.0, 7.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.