Lucene search
PRIOn knowledge basePRION:CVE-2020-12392HistoryMay 26, 2020 - 6:15 p.m.
Design/Logic Flaw
2020-05-2618:15:00
PRIOn knowledge base
www.prio-n.com
5
The ‘Copy as cURL’ feature of Devtools’ network tab did not properly escape the HTTP POST data of a request, which can be controlled by the website. If a user used the ‘Copy as cURL’ feature and pasted the command into a terminal, it could have resulted in the disclosure of local files. This vulnerability affects Firefox ESR < 68.8, Firefox < 76, and Thunderbird < 68.8.0.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ubuntu_linux | eq | 18.04 | |
| ubuntu_linux | eq | 19.10 | |
| ubuntu_linux | eq | 20.04 | |
| ubuntu_linux | eq | 16.04 | |
| firefox | lt | 76.0 | |
| firefox_esr | lt | 68.8.0 | |
| thunderbird | lt | 68.8.0 |
Related
alpinelinux
alpinelinux
CVE-2020-12392
2020-05-26 18:15:11
redhatcve
redhatcve
CVE-2020-12392
2020-05-05 16:41:15
debiancve
debiancve
CVE-2020-12392
2020-05-26 18:15:11
cvelist
cvelist
CVE-2020-12392
2020-05-26 17:01:54
ubuntucve
ubuntucve
CVE-2020-12392
2020-05-06 00:00:00
veracode
veracode
Unauthorized File Access
2020-05-07 01:53:57
nvd
nvd
CVE-2020-12392
2020-05-26 18:15:11
cve
cve
CVE-2020-12392
2020-05-26 18:15:11
openvas
openvas
Debian: Security Advisory (DSA-4678-1)
2020-05-08 00:00:00
Debian: Security Advisory (DLA-2205-1)
2020-05-09 00:00:00
Mageia: Security Advisory (MGASA-2020-0208)
2022-01-28 00:00:00
nessus
nessus
Debian DSA-4678-1 : firefox-esr - security update
2020-05-07 00:00:00
RHEL 8 : firefox (RHSA-2020:2033)
2020-05-06 00:00:00
Scientific Linux Security Update : firefox on SL7.x x86_64 (20200506)
2020-05-07 00:00:00
oraclelinux
oraclelinux
firefox security update
2020-05-07 00:00:00
firefox security update
2020-05-09 00:00:00
thunderbird security update
2020-05-12 00:00:00
centos
centos
firefox security update
2020-05-21 14:19:56
firefox security update
2020-05-21 14:13:31
thunderbird security update
2020-05-21 14:21:19
redhat
redhat
(RHSA-2020:2031) Critical: firefox security update
2020-05-06 07:47:33
(RHSA-2020:2037) Critical: firefox security update
2020-05-06 09:40:47
(RHSA-2020:2032) Critical: firefox security update
2020-05-06 07:47:48
mageia
mageia
Updated firefox packages fix security vulnerabilities
2020-05-08 13:57:54
Updated thunderbird packages fix security vulnerabilities
2020-05-08 13:57:54
osv
osv
firefox-esr - security update
2020-05-06 00:00:00
firefox-esr - security update
2020-05-08 00:00:00
thunderbird - security update
2020-05-08 00:00:00
ibm
ibm
debian
debian
[SECURITY] [DSA 4678-1] firefox-esr security update
2020-05-06 20:54:10
[SECURITY] [DLA 2205-1] firefox-esr security update
2020-05-08 12:35:22
[SECURITY] [DSA 4683-1] thunderbird security update
2020-05-08 19:14:02
ubuntu
ubuntu
Thunderbird vulnerabilities
2020-05-26 00:00:00
Firefox vulnerabilities
2020-05-07 00:00:00
Firefox regression
2020-05-12 00:00:00
gentoo
gentoo
Mozilla Thunderbird: Multiple vulnerabilities
2020-05-12 00:00:00
Mozilla Firefox: Multiple vulnerabilities
2020-05-12 00:00:00
archlinux
archlinux
[ASA-202005-7] thunderbird: multiple issues
2020-05-09 00:00:00
[ASA-202005-3] firefox: multiple issues
2020-05-06 00:00:00
kaspersky
kaspersky
KLA11779 Multiple vulnerabilities in Mozilla Thunderbird
2020-05-05 00:00:00
KLA11765 Multiple vulnerabilities in Mozilla Firefox ESR
2020-05-05 00:00:00
KLA11764 Multiple vulnerabilities in Mozilla Firefox
2020-05-05 00:00:00
mozilla
mozilla
Security Vulnerabilities fixed in Thunderbird 68.8.0 — Mozilla
2020-05-05 00:00:00
Security Vulnerabilities fixed in Firefox ESR 68.8 — Mozilla
2020-05-05 00:00:00
Security Vulnerabilities fixed in Firefox 76 — Mozilla
2020-05-05 00:00:00
suse
suse
Security update for MozillaThunderbird (important)
2020-05-11 00:00:00
Security update for MozillaFirefox (important)
2020-05-11 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package thunderbird version 68.8.0-alt1
2020-05-05 00:00:00
Security fix for the ALT Linux 10 package firefox-esr version 68.8.0-alt1
2020-05-05 00:00:00
slackware
slackware
[slackware-security] mozilla-firefox
2020-05-05 20:43:19
amazon
amazon
Critical: thunderbird
2020-05-19 18:32:00