medium6.5
CVE-2020-15655
A redirected HTTP request which is observed or modified through a web extension could bypass existing CORS checks, leading to potential disclosure of cross-ori…
Impact
A redirected HTTP request which is observed or modified through a web extension could bypass existing CORS checks, leading to potential disclosure of cross-origin information. This vulnerability affects Firefox ESR < 78.1, Firefox < 79, and Thunderbird < 78.1.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mozilla | Firefox | before 79.0 |
| Mozilla | Firefox Esr | before 78.1 |
| Mozilla | Thunderbird | before 78.1 |
| Opensuse | Leap | Version 15.2 |
| Canonical | Ubuntu Linux | Versions 16.04, 18.04, 20.04 |
References
- NVD record
- CVE.org record
- http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00025.html
- https://bugzilla.mozilla.org/show_bug.cgi?id=1645204
- https://usn.ubuntu.com/4443-1/
- https://www.mozilla.org/security/advisories/mfsa2020-30/
- https://www.mozilla.org/security/advisories/mfsa2020-32/
- https://www.mozilla.org/security/advisories/mfsa2020-33/
- http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00025.html
- https://bugzilla.mozilla.org/show_bug.cgi?id=1645204
- https://usn.ubuntu.com/4443-1/
- https://www.mozilla.org/security/advisories/mfsa2020-30/
- https://www.mozilla.org/security/advisories/mfsa2020-32/
- https://www.mozilla.org/security/advisories/mfsa2020-33/