CVE-2020-15655

Publication date

2020-08-10 17:43:24

Family

mozilla

State

PUBLISHED

Description

A redirected HTTP request which is observed or modified through a web extension could bypass existing CORS checks, leading to potential disclosure of cross-origin information. This vulnerability affects Firefox ESR < 78.1, Firefox < 79, and Thunderbird < 78.1.