CVE-2020-15676: XSS
Firefox sometimes ran the onload handler for SVG elements that the DOM sanitizer decided to remove, resulting in JavaScript being executed after pasting attacker-controlled data into a contenteditable element.
Other sources
Thunderbird sometimes ran the onload handler for SVG elements that the DOM sanitizer decided to remove, resulting in JavaScript being executed after pasting attacker-controlled data into a contenteditable element.
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2020-15676?
CVE-2020-15676 is classified as a high severity vulnerability due to potential arbitrary code execution.
How do I fix CVE-2020-15676?
To fix CVE-2020-15676, update Firefox to version 118.0.2-1 or later, or update Firefox ESR and Thunderbird as specified in the advisory.
Which versions of Firefox are affected by CVE-2020-15676?
Versions of Firefox prior to 118.0.2-1 are affected by CVE-2020-15676.
Is Firefox ESR affected by CVE-2020-15676?
Yes, specific versions of Firefox ESR including those prior to and including 78.3 are affected by CVE-2020-15676.
Can CVE-2020-15676 be exploited in contenteditable elements?
Yes, CVE-2020-15676 can be exploited when pasting attacker-controlled data into contenteditable elements.