CVE-2020-15652: Medium severity Mozilla Firefox vulnerability
By observing the stack trace for JavaScript errors in web workers, it was possible to leak the result of a cross-origin redirect. This applied only to content that can be parsed as script.
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is CVE-2020-15652?
CVE-2020-15652 is a vulnerability in Mozilla Firefox ESR and Thunderbird that allows the leakage of a cross-origin redirect result by observing the stack trace for JavaScript errors in web workers.
Which software versions are affected by CVE-2020-15652?
Mozilla Firefox ESR versions up to 68.11, Firefox ESR versions up to 78.1, Thunderbird versions up to 78.1, and Firefox versions up to 79 are affected by CVE-2020-15652.
What is the severity of CVE-2020-15652?
CVE-2020-15652 has a severity level of high.
How can I fix CVE-2020-15652?
To fix CVE-2020-15652, you should update Mozilla Firefox ESR to version 68.11 or higher, Firefox ESR to version 78.1 or higher, Thunderbird to version 78.1 or higher, or Firefox to version 79 or higher.
Where can I find more information about CVE-2020-15652?
You can find more information about CVE-2020-15652 on the Mozilla Bugzilla website and the Mozilla Security Advisories page.