CVE-2020-12414
N/A
N/A
Summary
IndexedDB should be cleared when leaving private browsing mode and it is not, the API for WKWebViewConfiguration was being used incorrectly and requires the private instance of this object be deleted when leaving private mode. This vulnerability affects Firefox for iOS < 27.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Mozilla | Firefox for iOS | unspecified < 27 | affected |
Weaknesses
- IndexedDB persists in private browsing mode
ADP Enrichment
CVE Program Container
Additional References
- https://www.mozilla.org/security/advisories/mfsa2020-23/
- https://bugzilla.mozilla.org/show_bug.cgi?id=1646756
References
- https://www.mozilla.org/security/advisories/mfsa2020-23/
- https://bugzilla.mozilla.org/show_bug.cgi?id=1646756
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.