Related Vulnerabilities: CVE-2019-11724  

Application permissions in Firefox before 68.0 give additional remote troubleshooting permission to the site input.mozilla.org, which has been retired and now redirects to another site. This additional permission is unnecessary and is a potential vector for malicious attacks.

Severity Low

Remote Yes

Type Access restriction bypass

Description

Application permissions in Firefox before 68.0 give additional remote troubleshooting permission to the site input.mozilla.org, which has been retired and now redirects to another site. This additional permission is unnecessary and is a potential vector for malicious attacks.

AVG-1002 firefox 67.0.4-2 68.0-1 Critical Testing

https://www.mozilla.org/en-US/security/advisories/mfsa2019-21/#CVE-2019-11724
https://bugzilla.mozilla.org/show_bug.cgi?id=1512511