CVE-2019-11730

CVE-2019-11730 is a medium-severity vulnerability affecting Firefox, Firefox ESR, and Thunderbird versions prior to 68 and 60.8 respectively. It allows a malicious HTML file, if opened locally, to use file: URIs to access and exfiltrate other files from the same directory or sub-directories. The attack requires user interaction (UI:R) to open the malicious file, but if successful, it can lead to high confidentiality impact (C:H) by reading sensitive local files. There is no public exploit code available, nor is there evidence of active exploitation or significant community discussion.