CVE-2020-15665 Affecting mozilla package, versions [,80.0)


Severity

Recommended
0.0
medium
0
10

CVSS assessment made by Snyk's Security Team. Learn more

Threat Intelligence

EPSS
0.1% (43rd percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-UNMANAGED-MOZILLA-2378621
  • published26 Jan 2022
  • disclosed1 Oct 2020
  • creditUnknown

Introduced: 1 Oct 2020

CVE-2020-15665  (opens in a new tab)

How to fix?

Upgrade mozilla to version 80.0 or higher.

Overview

Firefox did not reset the address bar after the beforeunload dialog was shown if the user chose to remain on the page. This could have resulted in an incorrect URL being shown when used in conjunction with other unexpected browser behaviors. This vulnerability affects Firefox < 80.

CVSS Scores

version 3.1