CVE-2020-12415

When "%2F" was present in a manifest URL, Firefox's AppCache behavior may have become confused and allowed a manifest to be served from a subdirectory

published July 9, 2020

CVSS
—
EPSS
1%
Percentile
69.5
In the wild
Unconfirmed
What it is

When "%2F" was present in a manifest URL, Firefox's AppCache behavior may have become confused and allowed a manifest to be served from a subdirectory. This could cause the appcache to be used to service requests for the top level directory. This vulnerability affects Firefox < 78.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01265 · 69.5th percentile
Published
2020-07-09T14:39Z
EPSS history
Timeline
  • 09 JUL 14:39Z
    When "%2F" was present in a manifest URL, Firefox's AppCache behavior may have become confused and allowed a manifest to be served from a subdirectory
    cvelistv5