CVE-2020-15649

Given an installed malicious file picker application, an attacker was able to steal and upload local files of their choosing, regardless of the actually files…

published August 10, 2020

CVSS
—
EPSS
1%
Percentile
53.4
In the wild
Unconfirmed
What it is

Given an installed malicious file picker application, an attacker was able to steal and upload local files of their choosing, regardless of the actually files picked. *Note: This issue only affected Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox ESR < 68.11.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00721 · 53.4th percentile
Published
2020-08-10T17:43Z
EPSS history
Timeline
  • 10 AUG 17:43Z
    Given an installed malicious file picker application, an attacker was able to steal and upload local files of their choosing, regardless of the actually files…
    cvelistv5