CVE-2020-26955

2020-12-0900:21:13

mozilla

www.cve.org

7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

34.9%

JSON

When a user downloaded a file in Firefox for Android, if a cookie is set, it would have been re-sent during a subsequent file download operation on the same domain, regardless of whether the original and subsequent request were in private and non-private browsing modes. Note: This issue only affected Firefox for Android. Other operating systems are unaffected.. This vulnerability affects Firefox < 83.

CNA Affected

[
  {
    "product": "Firefox",
    "vendor": "Mozilla",
    "versions": [
      {
        "status": "affected",
        "version": "< 83"
      }
    ]
  }
]