2 matches found
SUSE CVE-2020-6823
A malicious extension could have called browser.identity.launchWebAuthFlow, controlling the redirecturi, and through the Promise returned, obtain the Auth code and gain access to the user's account at the service provider. This vulnerability affects Firefox 75...
7.1CVSS8.6AI score0.01612EPSS
SaveExploits0References4
CVE-2020-6823
A malicious extension could have called browser.identity.launchWebAuthFlow, controlling the redirecturi, and through the Promise returned, obtain the Auth code and gain access to the user's account at the service provider. This vulnerability affects Firefox 75...
9.8CVSS7.5AI score0.01612EPSS
SaveExploits0References2
20