CVE-2020-15658

Katalog CVE

CVSS 6.5 · Medium EPSS 1,4%

Kerentanan Improper Check for Unusual or Exceptional Conditions pada mozilla firefox, mozilla firefox esr +2 lainnya. Skor CVSS 3.1 6.5 (Medium) menurut NVD.

Deskripsi (NVD)

The code for downloading files did not properly take care of special characters, which led to an attacker being able to cut off the file ending at an earlier position, leading to a different file type being downloaded than shown in the dialog. This vulnerability affects Firefox ESR < 78.1, Firefox < 79, and Thunderbird < 78.1.

Rincian

Terbit di NVD

10 Agustus 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.5 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-754: Improper Check for Unusual or Exceptional Conditions

EPSS (30 hari)

1,4% peluang dieksploitasi; lebih tinggi dari 71,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://bugzilla.mozilla.org/show_bug.cgi?id=1637745 issue tracking · permissions required · advisory vendor
• https://www.mozilla.org/security/advisories/mfsa2020-30/ advisory vendor
• https://www.mozilla.org/security/advisories/mfsa2020-32/ advisory vendor
• https://www.mozilla.org/security/advisories/mfsa2020-33/ advisory vendor
• http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00025.html advisory pihak ketiga
• https://usn.ubuntu.com/4443-1/ advisory pihak ketiga