ByteOS Network

NVD Vulnerability Details :

CVE-2019-13075

Analyzed

Source-cve@mitre.org

Published At-30 Jun, 2019 | 14:15

Updated At-08 Jul, 2019 | 16:03

Tor Browser through 8.5.3 has an information exposure vulnerability. It allows remote attackers to detect the browser's language via vectors involving an IFRAME element, because text in that language is included in the title attribute of a LINK element for a non-HTML page. This is related to a behavior of Firefox before 68.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	5.3	MEDIUM	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Primary	2.0	5.0	MEDIUM	AV:N/AC:L/Au:N/C:P/I:N/A:N

CPE Matches

torproject>>tor_browser>>Versions up to 8.5.3(inclusive)

cpe:2.3:a:torproject:tor_browser:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-200	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
https://hackerone.com/reports/588239	cve@mitre.org	Exploit Issue Tracking Third Party Advisory
https://trac.torproject.org/projects/tor/ticket/30657	cve@mitre.org	Vendor Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History