CVE-2020-12390

Опубликовано: 05 мая 2020

Источник: redhat

CVSS3: 9.8

EPSS Низкий

Описание

Incorrect origin serialization of URLs with IPv6 addresses could lead to incorrect security checks. This vulnerability affects Firefox < 76.

The Mozilla Foundation Security Advisory describes this flaw as: Incorrect origin serialization of URLs with IPv6 addresses could lead to incorrect security checks.

Затронутые пакеты

Платформа	Пакет	Состояние	Рекомендация	Релиз
Red Hat Enterprise Linux 5	firefox	Out of support scope
Red Hat Enterprise Linux 6	firefox	Out of support scope
Red Hat Enterprise Linux 7	firefox	Not affected
Red Hat Enterprise Linux 8	firefox	Fixed	RHSA-2020:3557	26.08.2020

Показывать по

Ссылки на источники

Дополнительная информация

Статус:

Moderate

Дефект:

CWE-502

https://bugzilla.redhat.com/show_bug.cgi?id=1834686Mozilla: Incorrect serialization of nsIPrincipal.origin for IPv6 addresses

EPSS

Процентиль: 73%

0.01582

Низкий

9.8 Critical

CVSS3

Связанные уязвимости

CVE-2020-12390

CVSS3: 9.8

ubuntu

около 6 лет назад

Incorrect origin serialization of URLs with IPv6 addresses could lead to incorrect security checks. This vulnerability affects Firefox < 76.

CVE-2020-12390

CVSS3: 9.8

nvd

около 6 лет назад

Incorrect origin serialization of URLs with IPv6 addresses could lead to incorrect security checks. This vulnerability affects Firefox < 76.

CVE-2020-12390

CVSS3: 9.8

debian

около 6 лет назад

Incorrect origin serialization of URLs with IPv6 addresses could lead ...

GHSA-2hhq-96pp-rf56

github

около 4 лет назад

Incorrect origin serialization of URLs with IPv6 addresses could lead to incorrect security checks. This vulnerability affects Firefox < 76.

EPSS

Процентиль: 73%

0.01582

Низкий

9.8 Critical

CVSS3