CVE-2020-12412

By navigating a tab using the history API, an attacker could cause the address bar to display the incorrect domain (with the https:// scheme, a blocked port…

published July 9, 2020

CVSS
—
EPSS
1%
Percentile
55.4
In the wild
Unconfirmed
What it is

By navigating a tab using the history API, an attacker could cause the address bar to display the incorrect domain (with the https:// scheme, a blocked port number such as '1', and without a lock icon) while controlling the page contents. This vulnerability affects Firefox < 70.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00778 · 55.4th percentile
Published
2020-07-09T14:47Z
EPSS history
Timeline
  • 09 JUL 14:47Z
    By navigating a tab using the history API, an attacker could cause the address bar to display the incorrect domain (with the https:// scheme, a blocked port…
    cvelistv5