FTP Connection Denial of Service Vulnerability in Firefox < 66

CVE-2019-9809 · MEDIUM Severity

AV:N/AC:L/AU:N/C:N/I:N/A:P

If the source for resources on a page is through an FTP connection, it is possible to trigger a series of modal alert messages for these resources through invalid credentials or locations. These messages cannot be immediately dismissed, allowing for a denial of service (DOS) attack. This vulnerability affects Firefox < 66.

Learn more about our Web Application Penetration Testing UK.