CVE-2020-15653

EPSS 1.2%

Vexday Risk Score

3Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS —EPSS 1.2%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado

Ciclo de vida

10 ago 2020Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

An iframe sandbox element with the allow-popups flag could be bypassed when using noopener links. This could have led to security issues for websites relying on sandbox configurations that allowed popups and hosted arbitrary content. This vulnerability affects Firefox ESR < 78.1, Firefox < 79, and Thunderbird < 78.1.

Productos afectados

Mozilla · Firefox Mozilla · Firefox ESR Mozilla · Thunderbird

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00025.html https://bugzilla.mozilla.org/show_bug.cgi?id=1521542 https://usn.ubuntu.com/4443-1/https://www.mozilla.org/security/advisories/mfsa2020-30/https://www.mozilla.org/security/advisories/mfsa2020-32/https://www.mozilla.org/security/advisories/mfsa2020-33/