CVE-2019-11698

CVE-2019-11698 describes a browser history theft vulnerability affecting Mozilla Firefox versions prior to 67, Firefox ESR prior to 60.7, and Thunderbird prior to 60.7. An attacker could craft a malicious hyperlink which, if dragged to the bookmark bar/sidebar and then to the web content area, would allow an arbitrary query of the user's browser history to be transmitted to the malicious site. This medium severity vulnerability (CVSS 5.3) has a low impact on confidentiality, requiring no user interaction for the initial malicious link but specific drag-and-drop actions for exploitation. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.