CVE-2020-15655

Name of the Vulnerable Software and Affected Versions Firefox ESR versions prior to 78.1 Firefox versions prior to 79 Thunderbird versions prior to 78.1

Description The issue is related to a CORS bypass in the implementation of the CORS mechanism in the affected software, potentially leading to the disclosure of cross-origin information. This could allow a remote attacker to gain unauthorized access to protected information. The vulnerability is associated with the inclusion of features from an untrusted controlled area.

Recommendations For Firefox ESR versions prior to 78.1, update to version 78.1 or later. For Firefox versions prior to 79, update to version 79 or later. For Thunderbird versions prior to 78.1, update to version 78.1 or later.