PT-2020-6743 · Mozilla+3 · Firefox+3

Lijo A.T

·

Published

2020-10-20

·

Updated

2024-12-12

·

CVE-2020-15682

CVSS v2.0

7.8

High

VectorAV:N/AC:L/Au:N/C:N/I:C/A:N
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 82
Description The issue is related to a spoofing attack that can occur when a user clicks on a link to an external protocol. This allows an attacker to induce a prompt that can be associated with an origin they do not control. The problem stems from a lack of proper source confirmation in the browser's mechanism.
Recommendations For versions prior to 82, update to version 82 or later to resolve the issue. As a temporary workaround, consider avoiding clicks on links to external protocols from untrusted sources until the update is applied.

Exploit

Fix

UI Misrepresentation of Critical Information

Origin Validation Error

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-451CWE-346

Related Identifiers

ALT-PU-2020-3120
ALT-PU-2021-1152
ALT-PU-2021-2725
ALT-PU-2021-2881
ALT-PU-2021-3368
ALT-PU-2021-3369
ALT-PU-2022-1781
BDU:2022-05932
CVE-2020-15682
OESA-2023-1673
OESA-2023-1674
OPENSUSE-SU-2024:10600-1
OPENSUSE-SU-2024:14572-1
USN-4599-1
USN-4599-2
USN-4599-3

Affected Products

Alt Linux
Firefox
Linuxmint
Ubuntu