Lucene search

K
prionPRIOn knowledge basePRION:CVE-2020-6823
HistoryApr 24, 2020 - 4:15 p.m.

Code injection

2020-04-2416:15:00
PRIOn knowledge base
www.prio-n.com
8

8.9 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

64.6%

A malicious extension could have called <code>browser.identity.launchWebAuthFlow</code>, controlling the redirect_uri, and through the Promise returned, obtain the Auth code and gain access to the user’s account at the service provider. This vulnerability affects Firefox < 75.

CPENameOperatorVersion
firefoxlt75.0

8.9 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

64.6%