6.5

CVE-2020-26975

EPSS 0.86%
Veröffentlicht 07.01.2021 14:15:12
Zuletzt bearbeitet 19.08.2026 15:29:21
Erkennungen
Login

When a malicious application installed on the user's device broadcast an Intent to Firefox for Android, arbitrary headers could have been specified, leading to attacks such as abusing ambient authority or session fixation. This was resolved by only allowing certain safe-listed headers. *Note: This issue only affected Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox < 84.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 0 Referenzen 5

NVD 1 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Mozilla ≫ Firefox Mobile SwPlatform android Version < 84.0

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.86%	0.536

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	6.5	2.8	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
NIST	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:P/A:N

Es wurden noch keine Informationen zu CWE veröffentlicht.

https://www.mozilla.org/security/advisories/mfsa2020-54/

Vendor Advisory

https://bugzilla.mozilla.org/show_bug.cgi?id=1661071

Permissions Required

https://nvd.nist.gov/vuln/detail/CVE-2020-26975

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2020-26975

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2020-26975

EUVD