CVE-2020-15671
published 2020-10-01CVE-2020-15671: When typing in a password under certain conditions, a race may have occured where the InputContext was not being correctly set for the input field, resulting…
PriorityP49low3.1CVSS 3.1
AVNACHPRNUIRSUCLINAN
EPSS
0.49%
38.8th percentile
When typing in a password under certain conditions, a race may have occured where the InputContext was not being correctly set for the input field, resulting in the typed password being saved to the keyboard dictionary. This vulnerability affects Firefox for Android < 80.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | firefox | — | — |
| mozilla | firefox | < 80.0 | 80.0 |
| mozilla | firefox | — | — |
| mozilla | firefox_for_android | >= unspecified < 80 | 80 |
CVSS provenance
nvdv3.13.1LOWCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
nvdv2.02.6LOWAV:N/AC:H/Au:N/C:P/I:N/A:N
vendor_debian3.1LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Debian
CVE-2020-15671: firefox - When typing in a password under certain conditions, a race may have occured wher...
vendor_debian·2020·CVSS 3.1
CVE-2020-15671 [LOW] CVE-2020-15671: firefox - When typing in a password under certain conditions, a race may have occured wher...
When typing in a password under certain conditions, a race may have occured where the InputContext was not being correctly set for the input field, resulting in the typed password being saved to the keyboard dictionary. This vulnerability affects Firefox for Android < 80.
Scope: local
sid: resolved
Mozilla
Mozilla Foundation Security Advisory 2020-39: CVE-2020-15671
vendor_mozilla·CVSS 3.1
CVE-2020-15671 [LOW] Mozilla Foundation Security Advisory 2020-39: CVE-2020-15671
Mozilla Foundation Security Advisory 2020-39
CVE: CVE-2020-15671
Product: Firefox for Android
Impact: high
Fixed in: Firefox for Android 80
GHSA
GHSA-r6xw-ww9g-m6wg: When typing in a password under certain conditions, a race may have occured where the InputContext was not being correctly set for the input field, re
ghsa_unreviewed·2022-05-24
CVE-2020-15671 [LOW] CWE-20 GHSA-r6xw-ww9g-m6wg: When typing in a password under certain conditions, a race may have occured where the InputContext was not being correctly set for the input field, re
When typing in a password under certain conditions, a race may have occured where the InputContext was not being correctly set for the input field, resulting in the typed password being saved to the keyboard dictionary. This vulnerability affects Firefox for Android < 80.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2020-10-01
Published