CVE-2020-26951
UNKNOWN
Published 2020-12-09T00:19:43
Actions:
No CVSS data available
Description
A parsing and event loading mismatch in Firefox's SVG code could have allowed load events to fire, even after sanitization. An attacker already capable of exploiting an XSS vulnerability in privileged internal pages could have used this attack to bypass our built-in sanitizer. This vulnerability affects Firefox < 83, Firefox ESR < 78.5, and Thunderbird < 78.5.
Available Exploits
No exploits available for this CVE.
Related News
No news articles found for this CVE.
Affected Products
Affected Versions:
Affected Versions:
References
Published: 2020-12-09T00:19:43
Last Modified: 2024-08-04T16:03:22.995Z
Copied to clipboard!