Mozilla Mozilla VPN Windows

• CVE-2020-15679 High 7.6 An OAuth session fixation vulnerability existed in the VPN login flow, where an attacker could craft a custom login URL, convince a VPN user to login via that URL, and obtain authenticated access as t 0.5%