CVE-2020-15650: Medium severity firefox esr vulnerability
Given an installed malicious file picker application, an attacker was able to overwrite local files and thus overwrite Firefox settings (but not access the previous profile). Note: This issue only affected Firefox for Android. Other operating systems are unaffected.
Other sources
Given an installed malicious file picker application, an attacker was able to overwrite local files and thus overwrite Firefox settings (but not access the previous profile). Note: This issue only affected Firefox for Android. Other operating systems are unaffected.. This vulnerability affects Firefox ESR < 68.11.
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2020-15650.
What is the severity of CVE-2020-15650?
The severity of CVE-2020-15650 is medium.
Which operating systems are affected by CVE-2020-15650?
Only Firefox for Android is affected by CVE-2020-15650. Other operating systems are unaffected.
How can an attacker exploit CVE-2020-15650?
An attacker can exploit CVE-2020-15650 by using an installed malicious file picker application to overwrite local files and Firefox settings.
How can I fix CVE-2020-15650?
To fix CVE-2020-15650, update Firefox for Android to version 68.11 or later.