Security Advisory

CVE-2020-15676

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-10-01 18:31:41

Last updated 2024-08-04 13:22:30

Assigner mozilla

CVSS score not scored

State PUBLISHED

Description

Firefox sometimes ran the onload handler for SVG elements that the DOM sanitizer decided to remove, resulting in JavaScript being executed after pasting attacker-controlled data into a contenteditable element. This vulnerability affects Firefox < 81, Thunderbird < 78.3, and Firefox ESR < 78.3.

← Browse all CVEs View on cve.org ↗