#VU47745 Spoofing attack in Mozilla Firefox - CVE-2020-15682
Published: October 20, 2020
Vulnerability identifier: #VU47745
Vulnerability risk: Low
CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear
CVE-ID: CVE-2020-15682
CWE-ID: CWE-451
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerable software:
Mozilla Firefox
Mozilla Firefox
Software vendor:
Mozilla
Mozilla
Description
The vulnerability allows a remote attacker to perform spoofing attack.
The vulnerability exists due to incorrect processing of user-supplied data. When a link to an external protocol was clicked, a prompt was presented
that allowed the user to choose what application to open it in. An
attacker could induce that prompt to be associated with an origin they
didn't control, resulting in a spoofing attack.
Remediation
Install updates from vendor's website.