CVE-2020-15648

Using object or embed tags, it was possible to frame other websites, even if they disallowed framing using the X-Frame-Options header

published August 10, 2020

CVSS
—
EPSS
1%
Percentile
66.4
In the wild
Unconfirmed
What it is

Using object or embed tags, it was possible to frame other websites, even if they disallowed framing using the X-Frame-Options header. This vulnerability affects Thunderbird < 78 and Firefox < 78.0.2.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01142 · 66.4th percentile
Published
2020-08-10T17:43Z
EPSS history
Timeline
  • 10 AUG 17:43Z
    Using object or embed tags, it was possible to frame other websites, even if they disallowed framing using the X-Frame-Options header
    cvelistv5