CVE-2020-35111 - log back

CVE-2020-35111 edited at 15 Dec 2020 17:23:55
Description
- A security issue was discovered in Firefox before 84.0. When an extension with the proxy permission registered to receive <all_urls>, the proxy.onRequest callback was not triggered for view-source URLs. While web content cannot navigate to such URLs, a user opening View Source could have inadvertently leaked their IP address.
+ A security issue was discovered in Firefox before 84.0 and Thunderbird before 78.6. When an extension with the proxy permission registered to receive <all_urls>, the proxy.onRequest callback was not triggered for view-source URLs. While web content cannot navigate to such URLs, a user opening View Source could have inadvertently leaked their IP address.
References
https://www.mozilla.org/en-US/security/advisories/mfsa2020-54/#CVE-2020-35111
+ https://www.mozilla.org/en-US/security/advisories/mfsa2020-56/#CVE-2020-35111
https://bugzilla.mozilla.org/show_bug.cgi?id=1657916
CVE-2020-35111 edited at 15 Dec 2020 17:08:15
Severity
- Unknown
+ Low
Remote
- Unknown
+ Remote
Type
- Unknown
+ Information disclosure
Description
+ A security issue was discovered in Firefox before 84.0. When an extension with the proxy permission registered to receive <all_urls>, the proxy.onRequest callback was not triggered for view-source URLs. While web content cannot navigate to such URLs, a user opening View Source could have inadvertently leaked their IP address.
References
+ https://www.mozilla.org/en-US/security/advisories/mfsa2020-54/#CVE-2020-35111
+ https://bugzilla.mozilla.org/show_bug.cgi?id=1657916
Notes
CVE-2020-35111 created at 15 Dec 2020 16:48:51