NetSight
IP …
medium6.1

CVE-2019-17022

When pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer does not escape < and > characters.

Impact

When pasting a &lt;style&gt; tag from the clipboard into a rich text editor, the CSS sanitizer does not escape &lt; and &gt; characters. Because the resulting string is pasted directly into the text node of the element this does not result in a direct injection into the webpage; however, if a webpage subsequently copies the node's innerHTML, assigning it to another innerHTML, this would result in an XSS vulnerability. Two WYSIWYG editors were identified with this behavior, more may exist. This vulnerability affects Firefox ESR < 68.4 and Firefox < 72.

Affected products

VendorProductAffected versions
MozillaFirefox
before 72.0
MozillaFirefox Esr
before 68.4
CanonicalUbuntu Linux
Versions 16.04, 18.04, 19.04, 19.10
DebianDebian Linux
Versions 8.0, 9.0, 10.0
RedhatEnterprise Linux Desktop
Versions 6.0, 7.0
RedhatEnterprise Linux Server
Versions 6.0, 7.0
RedhatEnterprise Linux Server Aus
Version 7.7
RedhatEnterprise Linux Server Tus
Version 7.7
RedhatEnterprise Linux Workstation
Versions 6.0, 7.0

Weakness classification

CWE-79

References