CVE-2019-13075

Tor Browser through 8.5.3 has an information exposure vulnerability. It allows remote attackers to detect the browser's language via vectors involving an IFRAME element, because text in that language is included in the title attribute of a LINK element for a non-HTML page. This is related to a behavior of Firefox before 68.

CVSS v3.0

5.3 MEDIUMCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

1.86% chance of exploitation in the next 30 days, 78th percentile

Published

2019-06-30

Updated

2024-08-04

Proof-of-concept exploits (1)

• https://hackerone.com/reports/588239

References

• CVE Record
• NVD entry

Related

• CVE-2019-13072
• CVE-2019-13086
• CVE-2019-13071
• CVE-2019-13096
• CVE-2019-13070
• CVE-2019-13097