critical9.0
CVE-2019-11595
In uBlock before 0.9.5.15, the $rewrite filter option allows filter-list maintainers to run arbitrary code in a client-side session when a web service loads a …
Impact
In uBlock before 0.9.5.15, the $rewrite filter option allows filter-list maintainers to run arbitrary code in a client-side session when a web service loads a script for execution using XMLHttpRequest or Fetch, and the script origin has an open redirect.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ublockorigin | Ublock Origin | before 0.9.5.15 |