CVE-2020-15648

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
10/08/2020
Last modified:
12/08/2020

Description

Using object or embed tags, it was possible to frame other websites, even if they disallowed framing using the X-Frame-Options header. This vulnerability affects Thunderbird

Vulnerable products and versions

CPE From Up to
cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:* 78.0.2 (excluding)
cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:* 78.0 (excluding)