Lucene search

K
prionPRIOn knowledge basePRION:CVE-2020-26958
HistoryDec 09, 2020 - 1:15 a.m.

Design/Logic Flaw

2020-12-0901:15:00
PRIOn knowledge base
www.prio-n.com
4

6.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.8%

Firefox did not block execution of scripts with incorrect MIME types when the response was intercepted and cached through a ServiceWorker. This could lead to a cross-site script inclusion vulnerability, or a Content Security Policy bypass. This vulnerability affects Firefox < 83, Firefox ESR < 78.5, and Thunderbird < 78.5.

CPENameOperatorVersion
firefoxlt83.0
firefox_esrlt78.5
thunderbirdlt78.5