Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2020-12415

Опубликовано: 16 июл. 2020
Источник: redhat
CVSS3: 6.5
EPSS Низкий

Описание

When "%2F" was present in a manifest URL, Firefox's AppCache behavior may have become confused and allowed a manifest to be served from a subdirectory. This could cause the appcache to be used to service requests for the top level directory. This vulnerability affects Firefox < 78.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5thunderbirdNot affected
Red Hat Enterprise Linux 6thunderbirdNot affected
Red Hat Enterprise Linux 7thunderbirdNot affected
Red Hat Enterprise Linux 8thunderbirdNot affected

Показывать по

Дополнительная информация

Статус:

Important
Дефект:
CWE-138->CWE-22
https://bugzilla.redhat.com/show_bug.cgi?id=1875241Mozilla: AppCache manifest poisoning due to url encoded character processing

EPSS

Процентиль: 57%
0.00353
Низкий

6.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.5
ubuntu
почти 5 лет назад

When "%2F" was present in a manifest URL, Firefox's AppCache behavior may have become confused and allowed a manifest to be served from a subdirectory. This could cause the appcache to be used to service requests for the top level directory. This vulnerability affects Firefox < 78.

CVSS3: 6.5
nvd
почти 5 лет назад

When "%2F" was present in a manifest URL, Firefox's AppCache behavior may have become confused and allowed a manifest to be served from a subdirectory. This could cause the appcache to be used to service requests for the top level directory. This vulnerability affects Firefox < 78.

CVSS3: 6.5
debian
почти 5 лет назад

When "%2F" was present in a manifest URL, Firefox's AppCache behavior ...

CVSS3: 6.5
github
около 3 лет назад

When "%2F" was present in a manifest URL, Firefox's AppCache behavior may have become confused and allowed a manifest to be served from a subdirectory. This could cause the appcache to be used to service requests for the top level directory. This vulnerability affects Firefox < 78.

CVSS3: 6.5
fstec
почти 5 лет назад

Уязвимость браузера Mozilla Firefox и почтового клиента Thunderbird, связанная с наличием %2F в URL-адресе манифеста, позволяющая нарушителю раскрыть защищаемую информацию

EPSS

Процентиль: 57%
0.00353
Низкий

6.5 Medium

CVSS3