PT-2020-6746 · Mozilla+6 · Firefox+8
Mikhail Oblozhikhin
·
Published
2020-07-28
·
Updated
2024-12-12
·
CVE-2020-15652
CVSS v2.0
7.8
High
| Vector | AV:N/AC:L/Au:N/C:C/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Mozilla Firefox versions prior to 79
Mozilla Firefox ESR versions prior to 78.1
Thunderbird versions prior to 78.1
Description
The issue is related to information leakage in error messages. It allows a remote attacker to disclose protected information by observing the stack trace for JavaScript errors in web workers, specifically when content can be parsed as script.
Recommendations
For Mozilla Firefox versions prior to 79, update to version 79 or later to resolve the issue.
For Mozilla Firefox ESR versions prior to 78.1, update to version 78.1 or later to resolve the issue.
For Thunderbird versions prior to 78.1, update to version 78.1 or later to resolve the issue.
Exploit
Fix
Generation of Error Message Containing Sensitive Information
Origin Validation Error
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Centos
Linuxmint
Firefox
Firefox Esr
Red Hat
Suse
Thunderbird
Ubuntu