CVE-2020-35111

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

When an extension with the proxy permission registered to receive <all_urls>, the proxy.onRequest callback was not triggered for view-source URLs. While web content cannot navigate to such URLs, a user opening View Source could have inadvertently leaked their IP address. This vulnerability affects Firefox < 84, Thunderbird < 78.6, and Firefox ESR < 78.6.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Affected software

Vendor	Product	Versions
Mozilla	Firefox	>= unspecified, < 84
Mozilla	Thunderbird	>= unspecified, < 78.6
Mozilla	Firefox ESR	>= unspecified, < 78.6

References

https://bugzilla.mozilla.org/show_bug.cgi?id=1657916Permissions Required
https://www.mozilla.org/security/advisories/mfsa2020-54/Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2020-55/Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2020-56/Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1657916Permissions Required
https://www.mozilla.org/security/advisories/mfsa2020-54/Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2020-55/Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2020-56/Vendor Advisory

Timeline

Published: Jan 7, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-351128.8If a user downloaded a file lacking an extension on Windows, and then "Open"-ed it from the downloads panel, if there was an executable file CVE-2020-351138.8Mozilla developers reported memory safety bugs present in Firefox 83 and Firefox ESR 78.5. Some of these bugs showed evidence of memory corr CVE-2020-351148.8Mozilla developers reported memory safety bugs present in Firefox 83. Some of these bugs showed evidence of memory corruption and we presume CVE-2020-35127.4A vulnerability in the PROFINET handler for Link Layer Discovery Protocol (LLDP) messages of Cisco IOS Software and Cisco IOS XE Software co CVE-2020-351218.8An issue was discovered in the Keysight Database Connector plugin before 1.5.0 for Confluence. A malicious user could insert arbitrary JavaS CVE-2020-351227.5An issue was discovered in the Keysight Database Connector plugin before 1.5.0 for Confluence. A malicious user could bypass the access cont CVE-2020-351236.5In Zimbra Collaboration Suite Network Edition versions < 9.0.0 P10 and 8.8.15 P17, there exists an XXE vulnerability in the saml consumer st CVE-2020-351249.6A cross-site scripting (XSS) vulnerability in the assets component of Mautic before 3.2.4 allows remote attackers to inject executable JavaS CVE-2020-351259.6A cross-site scripting (XSS) vulnerability in the forms component of Mautic before 3.2.4 allows remote attackers to inject executable JavaSc CVE-2020-351264.8Typesetter CMS 5.x through 5.1 allows admins to conduct Site Title persistent XSS attacks via an Admin/Configuration URI. NOTE: the signific CVE-2020-351275.4Ignite Realtime Openfire 4.6.0 has plugins/bookmarks/create-bookmark.jsp Stored XSS.CVE-2020-351289.0Mautic before 3.2.4 is affected by stored XSS. An attacker with permission to manage companies, an application feature, could attack other u