CVE-2020-15653

An iframe sandbox element with the allow-popups flag could be bypassed when using noopener links

published August 10, 2020

CVSS
—
EPSS
1%
Percentile
72.2
In the wild
Unconfirmed
What it is

An iframe sandbox element with the allow-popups flag could be bypassed when using noopener links. This could have led to security issues for websites relying on sandbox configurations that allowed popups and hosted arbitrary content. This vulnerability affects Firefox ESR < 78.1, Firefox < 79, and Thunderbird < 78.1.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01397 · 72.2th percentile
Published
2020-08-10T17:43Z
EPSS history
Timeline
  • 10 AUG 17:43Z
    An iframe sandbox element with the allow-popups flag could be bypassed when using noopener links
    cvelistv5