Lucene search

CVE-2020-6798

🗓️ 02 Mar 2020 05:13:15Reported by mozillaType

Vulnerability in template tag parsing leading to potential cross-site scripting in Thunderbird and Firefox

Reporter	Title	Published	Views	Family All 148
NVD	CVE-2020-6798	2 Mar 202005:15	–	nvd
AlpineLinux	CVE-2020-6798	2 Mar 202005:15	–	alpinelinux
Veracode	Cross-Site Scripting (XSS)	18 Feb 202000:28	–	veracode
Cvelist	CVE-2020-6798	2 Mar 202004:05	–	cvelist
UbuntuCve	CVE-2020-6798	11 Feb 202000:00	–	ubuntucve
Prion	Cross site scripting	2 Mar 202005:15	–	prion
RedhatCVE	CVE-2020-6798	11 Feb 202022:44	–	redhatcve
Debian CVE	CVE-2020-6798	2 Mar 202005:15	–	debiancve
Oracle linux	firefox security update	18 Feb 202000:00	–	oraclelinux
Oracle linux	firefox security update	19 Feb 202000:00	–	oraclelinux

Nvd

Vulners

Node

mozilla firefoxRange<73.0

mozilla firefox_esrRange<68.5.0

mozilla thunderbirdRange<68.5.0

[
  {
    "product": "Thunderbird",
    "vendor": "Mozilla",
    "versions": [
      {
        "lessThan": "68.5",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Firefox",
    "vendor": "Mozilla",
    "versions": [
      {
        "lessThan": "73",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "ESR68.5",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
mozilla	www.mozilla.org/security/advisories/mfsa2020-05/
mozilla	www.mozilla.org/security/advisories/mfsa2020-07/
mozilla	www.mozilla.org/security/advisories/mfsa2020-06/
security	www.security.gentoo.org/glsa/202003-02
usn	www.usn.ubuntu.com/4328-1/
bugzilla	www.bugzilla.mozilla.org/show_bug.cgi
security	www.security.gentoo.org/glsa/202003-10
usn	www.usn.ubuntu.com/4278-2/
usn	www.usn.ubuntu.com/4335-1/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

02 Mar 2020 05:15Current

6.6Medium risk

Vulners AI Score6.6

CVSS24.3

CVSS36.1

EPSS0.013

CWE-79