---

CVE-2020-6808 - log back

CVE-2020-6808 edited at 11 Mar 2020 10:59:10
Severity	- Unknown + Medium
Remote	- Unknown + Remote
Type	- Unknown + Content spoofing
Description	+ A security issue has been found in Firefox before 74 where, when a JavaScript URL (javascript:) is evaluated and the result is a string, this string is parsed to create an HTML document, which is then presented. Previously, this document's URL (as reported by the document.location property, for example) was the originating javascript: URL which could lead to spoofing attacks; it is now correctly the URL of the originating document.
References	+ https://www.mozilla.org/en-US/security/advisories/mfsa2020-08/#CVE-2020-6808 + https://bugzilla.mozilla.org/show_bug.cgi?id=1247968
Notes

CVE-2020-6808 created at 11 Mar 2020 10:25:09