CVE-2020-26976 – When a HTTPS pages was embedded in a HTTP page, and there was a service worker registered …

Vuln ID: CVE-2020-26976

Published:  2021-01-07  14:15:12Z

Description: When a HTTPS pages was embedded in a HTTP page, and there was a service worker registered for the former, the service worker could have intercepted the request for the secure page despite the iframe not being a secure context due to the (insecure) framing. This vulnerability affects Firefox < 84.

Source: NVD.NIST.GOV

 

Date:

Categorie(s):

Tag(s):