Security Advisory

CVE-2020-26976

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-01-07 13:52:09

Last updated 2024-08-04 16:03:23

Assigner mozilla

State PUBLISHED

Description

When a HTTPS pages was embedded in a HTTP page, and there was a service worker registered for the former, the service worker could have intercepted the request for the secure page despite the iframe not being a secure context due to the (insecure) framing. This vulnerability affects Firefox < 84.

← Browse all CVEs View on cve.org ↗