CVE-2020-15656
Global infos:
JIT optimizations involving the Javascript arguments object could confuse later optimizations. This risk was already mitigated by various precautions in the code, resulting in this bug rated at only moderate severity. This vulnerability affects Firefox ESR < 78.1, Firefox < 79, and Thunderbird < 78.1.
CVE Status: Modified
References:
Metrics:
| Attribute | Value |
|---|---|
| Attack Complexity | LOW |
| Attack Vector | NETWORK |
| Availability Impact | HIGH |
| Base Score | 8.8 |
| Base Severity | HIGH |
| Confidentiality Impact | HIGH |
| Integrity Impact | HIGH |
| Privileges Required | NONE |
| Scope | UNCHANGED |
| User Interaction | REQUIRED |
| Vector String | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
| Exploitability Score | 2.8 |
| Impact Score | 5.9 |
| Source | [email protected] |
| Type | Primary |