PT-2020-13107
CVE-2020-12414
·
Published
2020-07-09
·
Updated
2020-07-13
Description by
CVSS 3.1
6.5
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions
Firefox for iOS versions prior to 27
Description
The issue arises from the incorrect use of the API for WKWebViewConfiguration in private browsing mode, leading to IndexedDB not being cleared when the mode is exited. This requires the private instance of the WKWebViewConfiguration object to be deleted upon leaving private mode.
Recommendations
For versions prior to 27, update to version 27 or later to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾