CVE-2020-15655
10.08.2020, 18:15
A redirected HTTP request which is observed or modified through a web extension could bypass existing CORS checks, leading to potential disclosure of cross-origin information. This vulnerability affects Firefox ESR < 78.1, Firefox < 79, and Thunderbird < 78.1.Enginsight
| Vendor | Product | Version |
|---|---|---|
| mozilla | firefox | 𝑥 < 79.0 |
| mozilla | firefox_esr | 𝑥 < 78.1 |
| mozilla | thunderbird | 𝑥 < 78.1 |
| opensuse | leap | 15.2 |
| canonical | ubuntu_linux | 16.04 |
| canonical | ubuntu_linux | 18.04 |
| canonical | ubuntu_linux | 20.04 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| firefox |
| ||||||||||||||||||||||||
| mozjs38 |
| ||||||||||||||||||||||||
| mozjs52 |
| ||||||||||||||||||||||||
| mozjs60 |
| ||||||||||||||||||||||||
| mozjs68 |
| ||||||||||||||||||||||||
| thunderbird |
|
References