When a HTTPS pages was embedded in a HTTP page, and there was a service worker registered for the former, the service worker could have intercepted the request for the secure page despite the iframe not being a secure context due to the (insecure) framing. This vulnerability affects Firefox < 84.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-firefox-esralpine-linux-upgrade-firefoxalpine-linux-upgrade-thunderbirdalpine-linux-upgrade-librewolf | Jun 17, 2022 | Jan 7, 2021 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-thunderbirdamazon-linux-ami-2-upgrade-thunderbird-debuginfo | Feb 22, 2021 | Jan 7, 2021 | |
| Arch Linux | arch-linux-upgrade-latest | Jul 11, 2025 | Jan 7, 2021 | |
| Centos_linux | — | centos-upgrade-firefoxcentos-upgrade-firefox-debuginfocentos-upgrade-firefox-debugsourcecentos-upgrade-thunderbirdcentos-upgrade-thunderbird-debuginfocentos-upgrade-thunderbird-debugsource | Jan 28, 2021 | Jan 7, 2021 |
| Debian | debian-upgrade-firefox-esrdebian-upgrade-thunderbird | Jan 29, 2021 | Jan 7, 2021 | |
| Gentoo Linux | gentoo-linux-upgrade-mail-client-thunderbirdgentoo-linux-upgrade-mail-client-thunderbird-bin | Feb 1, 2021 | Jan 7, 2021 | |
| Mfsa2020 54 | mozilla-firefox-upgrade-84_0 | Dec 16, 2020 | Dec 15, 2020 | |
| Mfsa2021 04 | mozilla-firefox-esr-upgrade-78_7 | Jan 27, 2021 | Jan 7, 2021 | |
| Mozilla Thunderbird | mozilla-thunderbird-upgrade-78_7 | Jan 27, 2021 | Jan 7, 2021 | |
| Oracle Solaris | oracle-solaris-11-4-upgrade-mail-thunderbird-78-8-0-11-4-31-0-1-88-4oracle-solaris-11-4-upgrade-web-browser-firefox-78-8-0-11-4-31-0-1-88-4oracle-solaris-11-4-upgrade-web-data-firefox-bookmarks-78-8-0-11-4-31-0-1-88-4 | Mar 17, 2021 | Jan 7, 2021 | |
| Oracle_linux | — | oracle-linux-upgrade-firefoxoracle-linux-upgrade-thunderbird | Jan 28, 2021 | Jan 26, 2021 |
| Redhat_linux | redhat-upgrade-firefoxredhat-upgrade-firefox-debuginforedhat-upgrade-firefox-debugsourceredhat-upgrade-thunderbirdredhat-upgrade-thunderbird-debuginforedhat-upgrade-thunderbird-debugsource | Jan 28, 2021 | Jan 7, 2021 | |
| Suse | — | suse-upgrade-mozillafirefoxsuse-upgrade-mozillafirefox-branding-upstreamsuse-upgrade-mozillafirefox-buildsymbolssuse-upgrade-mozillafirefox-develsuse-upgrade-mozillafirefox-translations-commonsuse-upgrade-mozillafirefox-translations-othersuse-upgrade-mozillathunderbirdsuse-upgrade-mozillathunderbird-translations-commonsuse-upgrade-mozillathunderbird-translations-other | Jan 30, 2021 | Dec 15, 2020 |
| Ubuntu | ubuntu-upgrade-firefoxubuntu-upgrade-thunderbird | Dec 16, 2020 | Dec 15, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub