CVE-2020-15649: Malicious File Upload
Given an installed malicious file picker application, an attacker was able to steal and upload local files of their choosing, regardless of the actually files picked. Note: This issue only affected Firefox for Android. Other operating systems are unaffected.
Other sources
Given an installed malicious file picker application, an attacker was able to steal and upload local files of their choosing, regardless of the actually files picked. Note: This issue only affected Firefox for Android. Other operating systems are unaffected.. This vulnerability affects Firefox ESR < 68.11.
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2020-15649?
The severity of CVE-2020-15649 is medium.
What is the affected software of CVE-2020-15649?
The affected software of CVE-2020-15649 is Mozilla Firefox ESR version 68.11.
What is the impact of CVE-2020-15649?
The impact of CVE-2020-15649 is that an attacker can steal and upload local files of their choosing.
How can I fix CVE-2020-15649?
To fix CVE-2020-15649, update Mozilla Firefox to version 68.11 or newer.
Where can I find more information about CVE-2020-15649?
You can find more information about CVE-2020-15649 on the Mozilla website and Bugzilla.