Vulnerability in Mozilla Firefox
CVE-2020-12414
IndexedDB should be cleared when leaving private browsing mode and it is not, the API for WKWebViewConfiguration was being used incorrectly and requires the private instance of this object be deleted when leaving private mode. This vulnerability affects Firefox for iOS < 27.
EPSS: 0.007 (48.5th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N.
Affected products
- Mozilla Firefox
- Mozilla Firefox For Ios — versions unspecified
Weakness classification (CWE)
References
- security@mozilla.org (x_refsource_MISC, Vendor Advisory)
- security@mozilla.org (Permissions Required, x_refsource_MISC, Issue Tracking, Vendor Advisory)
Frequently asked questions
- What is CVE-2020-12414?
- CVE-2020-12414 is a medium-severity vulnerability in Mozilla Firefox, classified under Incomplete Cleanup. CVSS score: 6.5/10. Published 2020-07-09.
- How severe is CVE-2020-12414?
- Medium severity. CVSS v3 base score is 6.5 out of 10.