CVE-2020-15653

Name of the Vulnerable Software and Affected Versions Firefox ESR versions prior to 78.1 Firefox versions prior to 79 Thunderbird versions prior to 78.1

Description A security issue was found in the iframe sandbox element with the allow-popups flag, which could be bypassed when using noopener links. This could lead to security problems for websites that rely on sandbox configurations allowing popups and hosting arbitrary content. The vulnerability is related to incorrect default access permission settings.

Recommendations For Firefox ESR versions prior to 78.1, update to version 78.1 or later. For Firefox versions prior to 79, update to version 79 or later. For Thunderbird versions prior to 78.1, update to version 78.1 or later.