ALPINE-CVE-2020-15682

See a problem?
Please try reporting it to the source first.
Source
https://security.alpinelinux.org/vuln/CVE-2020-15682
Import Source
https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2020-15682.json
JSON Data
https://api.osv.dev/v1/vulns/ALPINE-CVE-2020-15682
Upstream
  • CVE-2020-15682
Published
2020-10-22T21:15:13Z
Modified
2026-11-03T06:32:24Z
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N CVSS Calculator
Summary
[none]
Details

When a link to an external protocol was clicked, a prompt was presented that allowed the user to choose what application to open it in. An attacker could induce that prompt to be associated with an origin they didn't control, resulting in a spoofing attack. This was fixed by changing external protocol prompts to be tab-modal while also ensuring they could not be incorrectly associated with a different origin. This vulnerability affects Firefox < 82.

References

Affected packages

Alpine:v3.12
firefox

Package

Name
firefox
Purl
pkg:apk/alpine/firefox?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
82.0-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2020-15682.json"
Alpine:v3.13
firefox

Package

Name
firefox
Purl
pkg:apk/alpine/firefox?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
82.0-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2020-15682.json"
Alpine:v3.14
firefox

Package

Name
firefox
Purl
pkg:apk/alpine/firefox?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
82.0-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2020-15682.json"
Alpine:v3.15
firefox

Package

Name
firefox
Purl
pkg:apk/alpine/firefox?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
82.0-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2020-15682.json"
Alpine:v3.16
firefox

Package

Name
firefox
Purl
pkg:apk/alpine/firefox?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
82.0-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2020-15682.json"
Alpine:v3.17
firefox

Package

Name
firefox
Purl
pkg:apk/alpine/firefox?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
82.0-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2020-15682.json"
Alpine:v3.18
firefox

Package

Name
firefox
Purl
pkg:apk/alpine/firefox?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
82.0-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2020-15682.json"
Alpine:v3.19
firefox

Package

Name
firefox
Purl
pkg:apk/alpine/firefox?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
82.0-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2020-15682.json"
Alpine:v3.20
firefox

Package

Name
firefox
Purl
pkg:apk/alpine/firefox?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
82.0-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2020-15682.json"
Alpine:v3.21
firefox

Package

Name
firefox
Purl
pkg:apk/alpine/firefox?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
82.0-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2020-15682.json"
librewolf

Package

Name
librewolf
Purl
pkg:apk/alpine/librewolf?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
82.0-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2020-15682.json"
Alpine:v3.22
firefox

Package

Name
firefox
Purl
pkg:apk/alpine/firefox?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
82.0-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2020-15682.json"
librewolf

Package

Name
librewolf
Purl
pkg:apk/alpine/librewolf?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
82.0-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2020-15682.json"
Alpine:v3.23
firefox

Package

Name
firefox
Purl
pkg:apk/alpine/firefox?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
82.0-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2020-15682.json"
librewolf

Package

Name
librewolf
Purl
pkg:apk/alpine/librewolf?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
82.0-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2020-15682.json"
Alpine:v3.24
librewolf

Package

Name
librewolf
Purl
pkg:apk/alpine/librewolf?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
82.0-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2020-15682.json"