CVE-2020-12408: Medium severity Mozilla Firefox vulnerability
Last updated 24 July 2024
Other sources
When browsing a document hosted on an IP address, an attacker could insert certain characters to flip domain and path information in the address bar.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Firefoxto a version that resolves this vulnerability.Fixed in 77 - Upgrade
Upgrade
debian/firefoxto a version that resolves this vulnerability.Fixed in 137.0-1 - Upgrade
Upgrade
alpine/firefoxto a version that resolves this vulnerability.Fixed in 77.0-r0 - Upgrade
Upgrade
alpine/librewolfto a version that resolves this vulnerability.Fixed in 77.0-r0
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is CVE-2020-12408?
CVE-2020-12408 is a vulnerability that allows an attacker to manipulate the domain and path information in the address bar when browsing a document hosted on an IP address.
Which software is affected by CVE-2020-12408?
Mozilla Firefox version 77 is affected by CVE-2020-12408.
How severe is CVE-2020-12408?
CVE-2020-12408 has a low severity rating.
What is the remedy for CVE-2020-12408?
Upgrading to Mozilla Firefox version 77 is the recommended remedy for CVE-2020-12408.
Where can I find more information about CVE-2020-12408?
You can find more information about CVE-2020-12408 on the Mozilla Bugzilla and Mozilla Security Advisories websites.