Vulnerability · Published Aug 10, 2020 · Assigned by mozilla
CVE-2020-15647
High 7.4
In plain English
A high-severity security flaw in Firefox for from Mozilla. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.1% (higher than 66% of all known vulnerabilities).
Severity (CVSS NVD)7.4High
Exploit odds (30 days)1.1%top 34.2% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
A Content Provider in Firefox for Android allowed local files accessible by the browser to be read by a remote webpage, leading to sensitive data disclosure, including cookies for other origins. This vulnerability affects Firefox for < Android.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Mozilla | Firefox for | unspecified – before Android |
References
- https://www.mozilla.org/security/advisories/mfsa2020-27/ x_refsource_MISC
- https://bugzilla.mozilla.org/show_bug.cgi?id=1647078 x_refsource_MISC