CVE-2020-26962

Cross-origin iframes that contained a login form could have been recognized by the login autofill service, and populated

published December 9, 2020

CVSS
—
EPSS
1%
Percentile
52.5
In the wild
Unconfirmed
What it is

Cross-origin iframes that contained a login form could have been recognized by the login autofill service, and populated. This could have been used in clickjacking attacks, as well as be read across partitions in dynamic first party isolation. This vulnerability affects Firefox < 83.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00698 · 52.5th percentile
Published
2020-12-09T00:24Z
EPSS history
Timeline
  • 09 DEC 00:24Z
    Cross-origin iframes that contained a login form could have been recognized by the login autofill service, and populated
    cvelistv5