Vulnerability Details CVE-2020-15662
A rogue webpage could override the injected WKUserScript used by the download feature, this exploit could result in the user downloading an unintended file. This vulnerability affects Firefox for iOS < 28.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.007
EPSS Ranking 49.5%
CVSS Severity
CVSS v3 Score 6.5
CVSS v2 Score 4.3
References
Products affected by CVE-2020-15662
-
cpe:2.3:a:mozilla:firefox_mobile:-
-
cpe:2.3:a:mozilla:firefox_mobile:14.0
-
cpe:2.3:a:mozilla:firefox_mobile:15.0
-
cpe:2.3:a:mozilla:firefox_mobile:15.1
-
cpe:2.3:a:mozilla:firefox_mobile:16.0
-
cpe:2.3:a:mozilla:firefox_mobile:16.1
-
cpe:2.3:a:mozilla:firefox_mobile:16.2
-
cpe:2.3:a:mozilla:firefox_mobile:17.0
-
cpe:2.3:a:mozilla:firefox_mobile:17.1
-
cpe:2.3:a:mozilla:firefox_mobile:17.2
-
cpe:2.3:a:mozilla:firefox_mobile:17.3
-
cpe:2.3:a:mozilla:firefox_mobile:18.0
-
cpe:2.3:a:mozilla:firefox_mobile:18.1
-
cpe:2.3:a:mozilla:firefox_mobile:18.2
-
cpe:2.3:a:mozilla:firefox_mobile:19.0
-
cpe:2.3:a:mozilla:firefox_mobile:19.1
-
cpe:2.3:a:mozilla:firefox_mobile:20.0
-
cpe:2.3:a:mozilla:firefox_mobile:20.1
-
cpe:2.3:a:mozilla:firefox_mobile:20.2
-
cpe:2.3:a:mozilla:firefox_mobile:21.0
-
cpe:2.3:a:mozilla:firefox_mobile:22.0
-
cpe:2.3:a:mozilla:firefox_mobile:23.0
-
cpe:2.3:a:mozilla:firefox_mobile:24.0
-
cpe:2.3:a:mozilla:firefox_mobile:24.1
-
cpe:2.3:a:mozilla:firefox_mobile:25.0
-
cpe:2.3:a:mozilla:firefox_mobile:25.1
-
cpe:2.3:a:mozilla:firefox_mobile:26.0
-
cpe:2.3:a:mozilla:firefox_mobile:27.0