Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2020-12394

Опубликовано: 26 мая 2020
Источник: debian
EPSS Низкий

Описание

A logic flaw in our location bar implementation could have allowed a local attacker to spoof the current location by selecting a different origin and removing focus from the input element. This vulnerability affects Firefox < 76.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
firefoxfixed76.0-1package

Примечания

  • https://www.mozilla.org/en-US/security/advisories/mfsa2020-16/#CVE-2020-12394

EPSS

Процентиль: 35%
0.00139
Низкий

Связанные уязвимости

CVSS3: 3.3
ubuntu
около 5 лет назад

A logic flaw in our location bar implementation could have allowed a local attacker to spoof the current location by selecting a different origin and removing focus from the input element. This vulnerability affects Firefox < 76.

CVSS3: 2.5
redhat
около 5 лет назад

A logic flaw in our location bar implementation could have allowed a local attacker to spoof the current location by selecting a different origin and removing focus from the input element. This vulnerability affects Firefox < 76.

CVSS3: 3.3
nvd
около 5 лет назад

A logic flaw in our location bar implementation could have allowed a local attacker to spoof the current location by selecting a different origin and removing focus from the input element. This vulnerability affects Firefox < 76.

CVSS3: 3.3
github
около 3 лет назад

A logic flaw in our location bar implementation could have allowed a local attacker to spoof the current location by selecting a different origin and removing focus from the input element. This vulnerability affects Firefox < 76.

EPSS

Процентиль: 35%
0.00139
Низкий