Skip to content
Not rated

CVE-2019-9808 If WebRTC permission is requested from documents with data: or blob: URLs, the permission notifications do not…

Description

If WebRTC permission is requested from documents with data: or blob: URLs, the permission notifications do not properly display the originating domain. The notification states "Unknown origin" as the requestee, leading to user confusion about which site is asking for this permission. This vulnerability affects Firefox < 66.

Affected products and versions

Product Affected versions Fixed in
Firefox 66 earliest → < 66 66
The 2221 CVEs of Firefox →
Track this CVE