CVE-2020-12409

Reference Links

• https://bugzilla.mozilla.org/show_bug.cgi?id=1629506
• https://www.mozilla.org/security/advisories/mfsa2020-20/
• https://launchpad.net/bugs/cve/CVE-2020-12409
• https://www.mozilla.org/en-US/security/advisories/mfsa2020-20/
• https://www.mozilla.org/en-US/security/advisories/mfsa2020-20/#CVE-2020-12407
• https://www.mozilla.org/en-US/security/advisories/mfsa2020-20/#CVE-2020-12409
• https://security-tracker.debian.org/tracker/CVE-2020-12409
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12409
• https://nvd.nist.gov/vuln/detail/CVE-2020-12409
• https://ubuntu.com/security/CVE-2020-12409

Parent vulnerabilities

(Appears in the following advisories)

• MFSA2020-20

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2020-12399
• CVE-2020-12405
• CVE-2020-12406
• CVE-2020-12407
• CVE-2020-12408
• CVE-2020-12409
• CVE-2020-12410
• CVE-2020-12411

Frequently Asked Questions

• What is CVE-2020-12409?

  CVE-2020-12409 is a vulnerability in Firefox < 77 that incorrectly renders certain blank characters in a URL as spaces instead of an encoded URL.

• Who is affected by CVE-2020-12409?

  Users of Firefox versions earlier than 77 are affected by CVE-2020-12409.

• What is the severity of CVE-2020-12409?

  CVE-2020-12409 is rated as high severity with a CVSS score of 8.8.

• How does CVE-2020-12409 impact users?

  CVE-2020-12409 may allow attackers to deceive users by rendering certain blank characters in a URL incorrectly.

• How can I fix CVE-2020-12409?

  To fix CVE-2020-12409, users should upgrade to Firefox version 77 or later.