CVE-2020-12414
published 2020-07-09CVE-2020-12414: IndexedDB should be cleared when leaving private browsing mode and it is not, the API for WKWebViewConfiguration was being used incorrectly and requires the…
PriorityP426medium6.5CVSS 3.1
AVNACLPRNUIRSUCNIHAN
EPSS
0.67%
47.9th percentile
IndexedDB should be cleared when leaving private browsing mode and it is not, the API for WKWebViewConfiguration was being used incorrectly and requires the private instance of this object be deleted when leaving private mode. This vulnerability affects Firefox for iOS < 27.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | firefox | — | — |
| mozilla | firefox | < 27.0 | 27.0 |
| mozilla | firefox | — | — |
| mozilla | firefox_for_ios | >= unspecified < 27 | 27 |
CVSS provenance
nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
vendor_debian6.5LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Debian
CVE-2020-12414: firefox - IndexedDB should be cleared when leaving private browsing mode and it is not, th...
vendor_debian·2020·CVSS 6.5
CVE-2020-12414 [MEDIUM] CVE-2020-12414: firefox - IndexedDB should be cleared when leaving private browsing mode and it is not, th...
IndexedDB should be cleared when leaving private browsing mode and it is not, the API for WKWebViewConfiguration was being used incorrectly and requires the private instance of this object be deleted when leaving private mode. This vulnerability affects Firefox for iOS < 27.
Scope: local
sid: resolved
Mozilla
Mozilla Foundation Security Advisory 2020-23: CVE-2020-12414
vendor_mozilla·CVSS 6.5
CVE-2020-12414 [MEDIUM] Mozilla Foundation Security Advisory 2020-23: CVE-2020-12414
Mozilla Foundation Security Advisory 2020-23
CVE: CVE-2020-12414
Product: Firefox for iOS
Impact: moderate
Fixed in: Firefox for iOS 27
GHSA
GHSA-68g9-f9xv-qr8g: IndexedDB should be cleared when leaving private browsing mode and it is not, the API for WKWebViewConfiguration was being used incorrectly and requir
ghsa_unreviewed·2022-05-24
CVE-2020-12414 [MEDIUM] GHSA-68g9-f9xv-qr8g: IndexedDB should be cleared when leaving private browsing mode and it is not, the API for WKWebViewConfiguration was being used incorrectly and requir
IndexedDB should be cleared when leaving private browsing mode and it is not, the API for WKWebViewConfiguration was being used incorrectly and requires the private instance of this object be deleted when leaving private mode. This vulnerability affects Firefox for iOS < 27.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2020-07-09
Published