CVE-2020-6798: XSS
If a <template> tag was used in a <select%gt; tag, the parser could be confused and allow JavaScript parsing and execution when it should not be allowed. A site that relied on the browser behaving correctly could suffer a cross-site scripting vulnerability as a result.
Other sources
If a template tag was used in a select tag, the parser could be confused and allow JavaScript parsing and execution when it should not be allowed. A site that relied on the browser behaving correctly could suffer a cross-site scripting vulnerability as a result. In general, this flaw cannot be exploited through email in the Thunderbird product because scripting is disabled when reading mail, but is potentially a risk in browser or browser-like contexts. This vulnerability affects Thunderbird < 68.5, Firefox < 73, and Firefox < ESR68.5.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Thunderbirdto a version that resolves this vulnerability.Fixed in 68.5 - Upgrade
Upgrade
Firefox ESRto a version that resolves this vulnerability.Fixed in 68.5 - Upgrade
Upgrade
Firefoxto a version that resolves this vulnerability.Fixed in 73 - Upgrade
Upgrade
debian/firefoxto a version that resolves this vulnerability.Fixed in 152.0.6-1 - Upgrade
Upgrade
debian/firefox-esrto a version that resolves this vulnerability.Fixed in 115.14.0esr-1~deb11u1Fixed in 140.12.0esr-1~deb11u1Fixed in 140.12.0esr-1~deb12u1Fixed in 140.12.0esr-1~deb13u1Fixed in 140.12.0esr-1 - Upgrade
Upgrade
debian/thunderbirdto a version that resolves this vulnerability.Fixed in 1:115.12.0-1~deb11u1Fixed in 1:140.12.0esr-1~deb11u1Fixed in 1:140.12.0esr-1~deb12u1Fixed in 1:140.12.0esr-1~deb13u1Fixed in 1:140.12.0esr-1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 68.5 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 73
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is CVE-2020-6798?
CVE-2020-6798 is a vulnerability that allows JavaScript parsing and execution in a select tag when a template tag is used, resulting in a potential cross-site scripting vulnerability.
Which software is affected by CVE-2020-6798?
Mozilla Firefox ESR version 68.5, Mozilla Firefox up to version 73.0, Mozilla Thunderbird up to version 68.5, and certain versions of Ubuntu Firefox and Thunderbird packages are affected by CVE-2020-6798.
What is the severity of CVE-2020-6798?
The severity of CVE-2020-6798 is medium with a CVSS score of 6.1.
How can I fix CVE-2020-6798?
Update your Mozilla Firefox or Thunderbird to the latest version, or apply the recommended updates for the affected Ubuntu packages.
Where can I find more information about CVE-2020-6798?
You can find more information about CVE-2020-6798 on the Mozilla Bugzilla and Mozilla Security Advisories websites.