[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248392

 
 

909

 
 

195452

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

The proxy.onRequest API did not catch view-source URLs - CVE-2020-35111

ID: oval:org.secpod.oval:def:67858Date: (C)2020-12-17   (M)2023-11-19
Class: VULNERABILITYFamily: macos




Mozilla Firefox 84Mozilla Firefox ESR 78.6 : When an extension with the proxy permission registered to receive , the proxy.onRequest callback was not triggered for view-source URLs. While web content cannot navigate to such URLs, a user opening View Source could have inadvertently leaked their IP address.

Platform:
Apple Mac OS 14
Apple Mac OS 13
Apple Mac OS 12
Apple Mac OS X 10.10
Apple Mac OS X 10.11
Apple Mac OS X 10.12
Apple Mac OS X 10.13
Apple Mac OS X 10.14
Apple Mac OS X 10.15
Apple Mac OS 11
Product:
Mozilla Firefox
Mozilla Firefox ESR
Mozilla Thunderbird
Reference:
CVE-2020-35111
CVE    1
CVE-2020-35111

© SecPod Technologies