CVE-2020-15652
10.08.2020, 18:15
By observing the stack trace for JavaScript errors in web workers, it was possible to leak the result of a cross-origin redirect. This applied only to content that can be parsed as script. This vulnerability affects Firefox < 79, Firefox ESR < 68.11, Firefox ESR < 78.1, Thunderbird < 68.11, and Thunderbird < 78.1.Enginsight
| Vendor | Product | Version |
|---|---|---|
| mozilla | firefox | 𝑥 < 79.0 |
| mozilla | firefox | 78.0 ≤ 𝑥 < 78.1 |
| mozilla | firefox_esr | 𝑥 < 68.11 |
| mozilla | thunderbird | 𝑥 < 68.11 |
| mozilla | thunderbird | 78.0 ≤ 𝑥 < 78.1 |
| canonical | ubuntu_linux | 16.04 |
| canonical | ubuntu_linux | 18.04 |
| canonical | ubuntu_linux | 20.04 |
𝑥
= Vulnerable software versions
Debian Releases
Debian Product | |||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| firefox |
| ||||||||||||
| firefox-esr |
| ||||||||||||
| thunderbird |
|
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| firefox |
| ||||||||||||||||||||||||
| mozjs38 |
| ||||||||||||||||||||||||
| mozjs52 |
| ||||||||||||||||||||||||
| mozjs60 |
| ||||||||||||||||||||||||
| mozjs68 |
| ||||||||||||||||||||||||
| thunderbird |
|
Common Weakness Enumeration
References