CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 8.3. It affects Firefox.
CVE
CVE-2019-11716
Severity
HIGH
CVSS
8.3
EPSS
1.35%
Firefox
Original NVD Description
Until explicitly accessed by script, window.globalThis is not enumerable and, as a result, is not visible to code such as Object.getOwnPropertyNames(window). Sites that deploy a sandboxing that depends on enumerating and freezing access to the window object may miss this, allowing their sandboxes to be bypassed. This vulnerability affects Firefox < 68.
Related CVEs
Other vulnerabilities affecting the same vendor(s)