vulnerability

Alpine Linux: CVE-2020-12423: Uncontrolled Search Path Element

Severity
7
CVSS
(AV:L/AC:M/Au:N/C:C/I:C/A:C)
Published
Jul 9, 2020
Added
Aug 22, 2024
Modified
Dec 5, 2025

Description

When the Windows DLL "webauthn.dll" was missing from the Operating System, and a malicious one was placed in a folder in the user's %PATH%, Firefox may have loaded the DLL, leading to arbitrary code execution. *Note: This issue only affects the Windows operating system; other operating systems are unaffected.* This vulnerability affects Firefox < 78.

Solutions

alpine-linux-upgrade-firefoxalpine-linux-upgrade-librewolf
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.