CVE-2020-6808: Medium severity Mozilla Firefox vulnerability
Last updated 25 August 2025
Other sources
When a JavaScript URL (javascript:) is evaluated and the result is a string, this string is parsed to create an HTML document, which is then presented. Previously, this document's URL (as reported by the document.location property, for example) was the originating javascript: URL which could lead to spoofing attacks; it is now correctly the URL of the originating document.
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2020-6808.
What is the severity level of CVE-2020-6808?
The severity level of CVE-2020-6808 is medium.
How does CVE-2020-6808 impact Mozilla Firefox?
CVE-2020-6808 affects Mozilla Firefox version up to but excluding version 74.
How can I fix CVE-2020-6808?
To fix CVE-2020-6808, update Mozilla Firefox to version 74 or later.
Where can I find more information about CVE-2020-6808?
You can find more information about CVE-2020-6808 in the Mozilla Firefox security advisory: https://www.mozilla.org/en-US/security/advisories/mfsa2020-08/