Vulnetix
Try Vulnetix Request Demo
CVE-2020-15653 PUBLISHED

An iframe sandbox element with the allow-popups flag could be bypassed when using noopener links. This could have led to security issues for websites relying on sandbox configurations that allowed popups and hosted arbitrary content. This vulnerability affects Firefox ESR < 78.1, Firefox < 79, and Thunderbird < 78.1.

EPSS 0.28% · 51.6th percentile

Risk Scores

EPSS Score
0.28%
51.6th percentile

Affected Products

VendorProductVersions
Ubuntu:18.04:LTSfirefox56.0+build6-0ubuntu1, 67.0.3+build1-0ubuntu0.18.04.1, 67.0.2+build2-0ubuntu0.18.04.1
Ubuntu:18.04:LTSthunderbird0, 1:60.4.0+build2-0ubuntu0.18.04.1, 1:60.2.1+build1-0ubuntu0.18.04.2
Ubuntu:18.04:LTSmozjs3838.8.0~repack1-0ubuntu3, 38.8.0~repack1-0ubuntu4, 38.8.0~repack1-0ubuntu1
Ubuntu:20.04:LTSmozjs520, 52.9.1-1ubuntu3, 52.9.1-1build1
Ubuntu:20.04:LTSfirefox76.0.1+build1-0ubuntu0.20.04.1, 0, 69.0.3+build1-0ubuntu1
Ubuntu:18.04:LTSmozjs5252.9.1-0ubuntu0.18.04.1, 0, 52.3.1-0ubuntu3
Ubuntu:16.04:LTSfirefox66.0.3+build1-0ubuntu0.16.04.1, 66.0.2+build1-0ubuntu0.16.04.1, 66.0.1+build1-0ubuntu0.16.04.1
Ubuntu:20.04:LTSmozjs6868.5.0-1~fakesync, 68.5.0-2~fakesync, 68.6.0-1
Ubuntu:20.04:LTSthunderbird1:68.3.1+build1-0ubuntu2, 1:68.4.1+build1-0ubuntu1, 1:68.4.2+build2-0ubuntu1

Timeline

References

Open in Interactive Console →