CVE-2020-6830

For native-to-JS bridging, the app requires a unique token to be passed that ensures non-app code can't call the bridging functions. That token was being used for JS-to-native also, but it isn't needed in this case, and its usage was also leaking this token. This vulnerability affects Firefox for...

CVE-2020-6830

The CVE-2020-6830 entry concerns Firefox for iOS, where a leakage of a unique token used for native-to-JS bridging (and previously also JS-to-native) enabled non-app code to call bridging functions. The connected sources confirm affected product/version: Firefox for iOS