CVE-2020-12424

2020-07-0913:55:56

mozilla

www.cve.org

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.9%

JSON

When constructing a permission prompt for WebRTC, a URI was supplied from the content process. This URI was untrusted, and could have been the URI of an origin that was previously granted permission; bypassing the prompt. This vulnerability affects Firefox < 78.

CNA Affected

[
  {
    "product": "Firefox",
    "vendor": "Mozilla",
    "versions": [
      {
        "lessThan": "78",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]