CVE-2020-26978 - log back

CVE-2020-26978 edited at 15 Dec 2020 17:23:27
Description
- A security issue was discovered in Firefox before 84.0. Using techniques that built on the slipstream research, a malicious webpage could have exposed both an internal network's hosts as well as services running on the user's local machine.
+ A security issue was discovered in Firefox before 84.0 and Thunderbird before 78.6. Using techniques that built on the slipstream research, a malicious webpage could have exposed both an internal network's hosts as well as services running on the user's local machine.
References
https://www.mozilla.org/en-US/security/advisories/mfsa2020-54/#CVE-2020-26978
+ https://www.mozilla.org/en-US/security/advisories/mfsa2020-56/#CVE-2020-26978
https://bugzilla.mozilla.org/show_bug.cgi?id=1677047
CVE-2020-26978 edited at 15 Dec 2020 17:06:04
Severity
- Unknown
+ Medium
Remote
- Unknown
+ Remote
Type
- Unknown
+ Information disclosure
Description
+ A security issue was discovered in Firefox before 84.0. Using techniques that built on the slipstream research, a malicious webpage could have exposed both an internal network's hosts as well as services running on the user's local machine.
References
+ https://www.mozilla.org/en-US/security/advisories/mfsa2020-54/#CVE-2020-26978
+ https://bugzilla.mozilla.org/show_bug.cgi?id=1677047
Notes
CVE-2020-26978 created at 15 Dec 2020 16:48:51