CVE-2020-6827

CVSS v3.1 4.7 (Medium)

CVSS v2.0 4.3 (Medium)

EPSS 0.08 % (37^th)

Affected Products 2

Advisories 5

When following a link that opened an intent://-schemed URL, causing a custom tab to be opened, Firefox for Android could be tricked into displaying the incorrect URI. <br> Note: This issue only affects Firefox for Android. Other operating systems are unaffected.. This vulnerability affects Firefox ESR < 68.7.

Weaknesses

CWE-1021: Improper Restriction of Rendered UI Layers or Frames

CVE Status: PUBLISHED
CNA: Mozilla Corporation
Published Date: 2020-04-24 16:15:13
(4 years ago)
Updated Date: 2020-05-01 13:25:52
(4 years ago)

Affected Products

Google

Android

Mozilla

Firefox Esr

Configuration #1

AND

		CPE23	Up To
OR
	Mozilla Firefox Esr prior 68.7.0 version	cpe:2.3:a:mozilla:firefox_esr	< 68.7.0
OR
	Running on/with
	Google Android	cpe:2.3:o:google:android:-