Beveiligingsadvies

CVE-2020-12424

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2020-07-09 13:55:56
Laatst bijgewerkt 2024-08-04 11:56:51
Toegewezen door mozilla
CVSS-score geen score
Status PUBLISHED

Beschrijving

When constructing a permission prompt for WebRTC, a URI was supplied from the content process. This URI was untrusted, and could have been the URI of an origin that was previously granted permission; bypassing the prompt. This vulnerability affects Firefox < 78.