CVE-2019-9808

If WebRTC permission is requested from documents with data: or blob: URLs, the permission notifications do not properly display the originating domain. The notification states "Unknown origin" as the requestee, leading to user confusion about which site is asking for this permission. This vulnerability affects Firefox < 66.

• CWE-346

• https://bugzilla.mozilla.org/show_bug.cgi?id=1434634Issue Tracking, Permissions Required, Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2019-07/Vendor Advisory
• https://bugzilla.mozilla.org/show_bug.cgi?id=1434634Issue Tracking, Permissions Required, Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2019-07/Vendor Advisory

Published

Apr 26, 2019

Last Modified

Jun 17, 2026

Status

Modified

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-9802If a Sandbox content process is compromised, it can initiate…
• CVE-2019-9803The Upgrade-Insecure-Requests (UIR) specification states tha…
• CVE-2019-9804In Firefox Developer Tools it is possible that pasting the r…
• CVE-2019-9805A latent vulnerability exists in the Prio library where data…9.8
• CVE-2019-9806A vulnerability exists during authorization prompting for FT…
• CVE-2019-9807When arbitrary text is sent over an FTP connection and a pag…
• CVE-2019-9809If the source for resources on a page is through an FTP conn…
• CVE-2019-9810Incorrect alias information in IonMonkey JIT compiler for Ar…8.8
• CVE-2019-9811As part of a winning Pwn2Own entry, a researcher demonstrate…8.3
• CVE-2019-9812Given a compromised sandboxed content process due to a separ…9.3
• CVE-2019-9813Incorrect handling of __proto__ mutations may lead to type c…
• CVE-2019-9814Mozilla developers and community members reported memory saf…