CVE-2020-12409: High severity Mozilla Firefox vulnerability
Last updated 24 July 2024
Other sources
When using certain blank characters in a URL, they where incorrectly rendered as spaces instead of an encoded URL.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Firefoxto a version that resolves this vulnerability.Fixed in 77 - Upgrade
Upgrade
debian/firefoxto a version that resolves this vulnerability.Fixed in 137.0.2-1 - Upgrade
Upgrade
alpine/firefoxto a version that resolves this vulnerability.Fixed in 77.0-r0 - Upgrade
Upgrade
alpine/librewolfto a version that resolves this vulnerability.Fixed in 77.0-r0
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is CVE-2020-12409?
CVE-2020-12409 is a vulnerability in Firefox < 77 that incorrectly renders certain blank characters in a URL as spaces instead of an encoded URL.
Who is affected by CVE-2020-12409?
Users of Firefox versions earlier than 77 are affected by CVE-2020-12409.
What is the severity of CVE-2020-12409?
CVE-2020-12409 is rated as high severity with a CVSS score of 8.8.
How does CVE-2020-12409 impact users?
CVE-2020-12409 may allow attackers to deceive users by rendering certain blank characters in a URL incorrectly.
How can I fix CVE-2020-12409?
To fix CVE-2020-12409, users should upgrade to Firefox version 77 or later.