Threat Investigation
Request a demo

CVE-2020-15680

Medium

Description

If a valid external protocol handler was referenced in an image tag, the resulting broken image size could be distinguished from a broken image size of a non-existent protocol handler. This allowed an attacker to successfully probe whether an external protocol handler was registered. This vulnerability affects Firefox < 82.

SeverityMedium
CVSS5.3
Exploit probability—
ProductMozilla Firefox
PublishedOct 22, 2020
First seenOct 22, 2020

How to fix

Update
  • mozilla firefox82.0 or later

Affected products

ProductAffected versionsFixed in
mozilla firefoxv < 82.082.0

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.