Medium severity · published Jun 30, 2019
CVE-2019-13075
Tor Browser through 8.5.3 has an information exposure vulnerability
5.3
CVSS
1.9%
EPSS
No
On KEV
Description
Tor Browser through 8.5.3 has an information exposure vulnerability. It allows remote attackers to detect the browser's language via vectors involving an IFRAME element, because text in that language is included in the title attribute of a LINK element for a non-HTML page. This is related to a behavior of Firefox before 68.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.9% · higher than 79% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TB
Tor Browser · Torproject
through 8.5.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-13075
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-13075
Exploit
https://hackerone.com/reports/588239
Vendor Advisory
https://trac.torproject.org/projects/tor/ticket/30657
More from Tor Browser
9.8
CVE-2018-16983
NoScript Classic before 5.1.8.7, as used in Tor Browser 7.x and other products, allows attackers to bypass script blocking via the text/html;/json Content-Type value
6.1
CVE-2021-39246
Tor Browser through 10.5.6 and 11.x through 11.0a4 allows a correlation attack that can compromise the privacy of visits to v2 onion addresses
4.3
CVE-2019-12383
Tor Browser before 8.0.1 has an information exposure vulnerability
4.3
CVE-2017-16639
Tor Browser on Windows before 8.0 allows remote attackers to bypass the intended anonymity feature and discover a client IP address, a different vulnerability than CVE-2017-16541