Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2020-15658

Date: August 10, 2020

The code for downloading files did not properly take care of special characters, which led to an attacker being able to cut off the file ending at an earlier position, leading to a different file type being downloaded than shown in the dialog. This vulnerability affects Firefox ESR < 78.1, Firefox < 79, and Thunderbird < 78.1.

Severity Score

Related Resources (11)

https://usn.ubuntu.com/4443-1/
https://access.redhat.com/security/cve/CVE-2020-15658
https://www.mozilla.org/security/advisories/mfsa2020-30/
https://people.canonical.com/~ubuntu-security/cve/CVE-2020-15658
https://security.alpinelinux.org/vuln/CVE-2020-15658
https://nvd.nist.gov/vuln/detail/CVE-2020-15658
https://www.mozilla.org/security/advisories/mfsa2020-33/
http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00025.html
https://www.mozilla.org/security/advisories/mfsa2020-32/
https://bugzilla.mozilla.org/show_bug.cgi?id=1637745
https://www.mend.io/vulnerability-database/CVE-2020-15658

Severity Score

Weakness Type (CWE)

Improper Check for Unusual or Exceptional Conditions

CWE-754

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): NONE
User Interaction (UI): REQUIRED
Scope (S): UNCHANGED
Confidentiality (C): NONE
Integrity (I): HIGH
Availability (A): NONE

CVSS v2

Base Score:
Access Vector (AV): NETWORK
Access Complexity (AC): MEDIUM
Authentication (AU): NONE
Confidentiality (C): NONE
Integrity (I): PARTIAL
Availability (A): NONE
Additional information:

Do you need more information?

Contact Us