Vulnetix
Try Vulnetix Request Demo
CVE-2020-12415 PUBLISHED

When "%2F" was present in a manifest URL, Firefox's AppCache behavior may have become confused and allowed a manifest to be served from a subdirectory. This could cause the appcache to be used to service requests for the top level directory. This vulnerability affects Firefox < 78.

EPSS 0.35% · 57.4th percentile

Risk Scores

EPSS Score
0.35%
57.4th percentile

Affected Products

VendorProductVersions
Ubuntu:20.04:LTSthunderbird1:68.1.2+build1-0ubuntu1, 1:68.4.2+build2-0ubuntu1, 1:68.4.1+build1-0ubuntu1
Ubuntu:20.04:LTSmozjs680, 68.6.0-1, 68.5.0-2~fakesync
Ubuntu:20.04:LTSmozjs5252.9.1-1build1, 0, 52.9.1-1ubuntu3
Ubuntu:18.04:LTSfirefox60.0.1+build2-0ubuntu0.18.04.1, 66.0.2+build1-0ubuntu0.18.04.1, 66.0.1+build1-0ubuntu0.18.04.1
Ubuntu:18.04:LTSthunderbird1:68.10.0+build1-0ubuntu0.18.04.1, 1:68.8.0+build2-0ubuntu0.18.04.2, 1:68.7.0+build1-0ubuntu0.18.04.1
Ubuntu:20.04:LTSfirefox75.0+build3-0ubuntu1, 0, 69.0.3+build1-0ubuntu1
Ubuntu:18.04:LTSmozjs3838.8.0~repack1-0ubuntu4, 38.8.0~repack1-0ubuntu3, 38.8.0~repack1-0ubuntu1
Ubuntu:16.04:LTSfirefox66.0.4+build3-0ubuntu0.16.04.1, 66.0.3+build1-0ubuntu0.16.04.1, 66.0.2+build1-0ubuntu0.16.04.1
Ubuntu:18.04:LTSmozjs5252.9.1-0ubuntu0.18.04.1, 52.8.1-0ubuntu0.18.04.1, 52.3.1-7fakesync1

Timeline

References

Open in Interactive Console →