PulseLinuxLINUX UPDATE INTELLIGENCE
CVE Database›CVE-2020-12424

CVE-2020-12424

Mozilla: WebRTC permission prompt could have been bypassed by a compromised content process

Loading…

Severity

Low

Red Hat Product Security

6.5

CVSS 3.1

Review impact separately from score.

Published · June 30, 2020

Updated · January 5, 2026

Description

When constructing a permission prompt for WebRTC, a URI was supplied from the content process. This URI was untrusted, and could have been the URI of an origin that was previously granted permission; bypassing the prompt. This vulnerability affects Firefox < 78.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

CWE-451 · User Interface (UI) Misrepresentation of Critical Information