CVE-2019-11593

CVE-2019-11593 describes a critical vulnerability in Adblock Plus versions prior to 3.5.2, where the $rewrite filter option could be leveraged by malicious filter-list maintainers. This flaw allows for arbitrary code execution in a client-side session if a web service loads a script via XMLHttpRequest or Fetch from an origin with an open redirect. Rated 8.1 HIGH, the vulnerability has a network attack vector and high impact on confidentiality, integrity, and availability, despite requiring high attack complexity. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.