CVE-2020-26962 | BDVDB-2026-145684 Detail

MozillaFirefox

Description#

Cross-origin iframes that contained a login form could have been recognized by the login autofill service, and populated. This could have been used in clickjacking attacks, as well as be read across partitions in dynamic first party isolation. This vulnerability affects Firefox < 83.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://bugzilla.mozilla.org/show_bug.cgi?id=610997
https://www.mozilla.org/security/advisories/mfsa2020-50/

Exploit#

No public exploit known

History#

Version 12020-12-09Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.