CVE-2020-6828 Path traversal in Firefox ESR
A malicious Android app can overwrite files in the Firefox profile directory via crafted Intents, potentially leading to arbitrary code execution.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2020-6828?
CVE-2020-6828 is a high-severity path traversal vulnerability in Mozilla Firefox Esr, published on 24 Apr 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A malicious Android application could craft an Intent that would have been processed by Firefox for Android and potentially result in a file overwrite in the user's profile directory. One exploitation vector for this would be to supply a user.js file providing arbitrary malicious preference values. Control of arbitrary preferences can lead to sufficient compromise such that it is generally equivalent to arbitrary code execution.<br> *Note: This issue only affects Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox ESR < 68.7.
Weakness: CWE-22
Which versions are affected by CVE-2020-6828?
It affects 1 product.
Products include Mozilla Firefox Esr.
How do I fix CVE-2020-6828?
Upgrade to a fixed version.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2020-6828 being exploited?
There is no known exploitation of CVE-2020-6828 in the wild and no public exploit code.
Other vulnerabilities in Mozilla Firefox Esr
Sources
Also known as GHSA-9562-p32f-jq35.