Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2020-12415

Опубликовано: 16 июл. 2020
Источник: redhat
CVSS3: 6.5

Описание

When "%2F" was present in a manifest URL, Firefox's AppCache behavior may have become confused and allowed a manifest to be served from a subdirectory. This could cause the appcache to be used to service requests for the top level directory. This vulnerability affects Firefox < 78.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5thunderbirdNot affected
Red Hat Enterprise Linux 6thunderbirdNot affected
Red Hat Enterprise Linux 7thunderbirdNot affected
Red Hat Enterprise Linux 8thunderbirdNot affected

Показывать по

Дополнительная информация

Статус:

Important
Дефект:
CWE-138->CWE-22
https://bugzilla.redhat.com/show_bug.cgi?id=1875241Mozilla: AppCache manifest poisoning due to url encoded character processing

6.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.5
ubuntu
больше 5 лет назад

When "%2F" was present in a manifest URL, Firefox's AppCache behavior may have become confused and allowed a manifest to be served from a subdirectory. This could cause the appcache to be used to service requests for the top level directory. This vulnerability affects Firefox < 78.

CVSS3: 6.5
nvd
больше 5 лет назад

When "%2F" was present in a manifest URL, Firefox's AppCache behavior may have become confused and allowed a manifest to be served from a subdirectory. This could cause the appcache to be used to service requests for the top level directory. This vulnerability affects Firefox < 78.

CVSS3: 6.5
debian
больше 5 лет назад

When "%2F" was present in a manifest URL, Firefox's AppCache behavior ...

CVSS3: 6.5
github
больше 3 лет назад

When "%2F" was present in a manifest URL, Firefox's AppCache behavior may have become confused and allowed a manifest to be served from a subdirectory. This could cause the appcache to be used to service requests for the top level directory. This vulnerability affects Firefox < 78.

CVSS3: 6.5
fstec
больше 5 лет назад

Уязвимость браузера Mozilla Firefox и почтового клиента Thunderbird, связанная с наличием %2F в URL-адресе манифеста, позволяющая нарушителю раскрыть защищаемую информацию

6.5 Medium

CVSS3