1. Home
  2. CVE Database
  3. CVE-2020-15650
MEDIUM · 5.5

CVE-2020-15650

Given an installed malicious file picker application, an attacker was able to overwrite local files and thus overwrite Firefox settings (but not access the previous profile). *Note: This issue only af...

Vulnerability Description

Given an installed malicious file picker application, an attacker was able to overwrite local files and thus overwrite Firefox settings (but not access the previous profile). *Note: This issue only affected Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox ESR < 68.11.

CVSS Score

5.5

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
NONE
Integrity
HIGH
Availability
NONE

Affected Products

VendorProductVersions
MozillaFirefox Esr< 68.11
GoogleAndroid-

References

FAQ

What is CVE-2020-15650?

CVE-2020-15650 is a vulnerability with a CVSS score of 5.5 (MEDIUM). Given an installed malicious file picker application, an attacker was able to overwrite local files and thus overwrite Firefox settings (but not access the previous profile). *Note: This issue only af...

How severe is CVE-2020-15650?

CVE-2020-15650 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2020-15650?

Check the references section above for vendor advisories and patch information. Affected products include: Mozilla Firefox Esr, Google Android.