CVE-2020-15648
Using object or embed tags, it was possible to frame other websites, even if they disallowed...
Using object or embed tags, it was possible to frame other websites, even if they disallowed framing using the X-Frame-Options header. This vulnerability affects Thunderbird < 78 and Firefox < 78.0.2.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- None
- Integrity
- High
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
Using object or embed tags, it was possible to frame other websites, even if they disallowed framing using the X-Frame-Options header. This vulnerability affects Thunderbird < 78 and Firefox < 78.0.2.
- Record
CVE-2020-15648- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N - CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:N - Weakness
- CWE-1021
- Updated
- 2026-11-02
CVE List No score
Using object or embed tags, it was possible to frame other websites, even if they disallowed framing using the X-Frame-Options header. This vulnerability affects Thunderbird < 78 and Firefox < 78.0.2.
- Record
CVE-2020-15648- Updated
- 2026-11-02
EUVDEUVD-2020-7635 No score
Using object or embed tags, it was possible to frame other websites, even if they disallowed framing using the X-Frame-Options header. This vulnerability affects Thunderbird < 78 and Firefox < 78.0.2.
- Record
EUVD-2020-7635- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jrmg-2w74-rwc9 No score
Using object or embed tags, it was possible to frame other websites, even if they disallowed...
Using object or embed tags, it was possible to frame other websites, even if they disallowed framing using the X-Frame-Options header. This vulnerability affects Thunderbird < 78 and Firefox < 78.0.2.
- Record
GHSA-jrmg-2w74-rwc9- Updated
- 2026-11-02
OSVRHSA-2020:3555
Red Hat Security Advisory: firefox security update
- Record
RHSA-2020:3555- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2020:3557
Red Hat Security Advisory: firefox security update
- Record
RHSA-2020:3557- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 4 moreShow less
OSVRHSA-2020:3559
Red Hat Security Advisory: firefox security update
- Record
RHSA-2020:3559- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2020:4080
Red Hat Security Advisory: firefox security and bug fix update
- Record
RHSA-2020:4080- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2020-15648
Using object or embed tags, it was possible to frame other websites, even if they disallowed framing using the X-Frame-Options header. This vulnerability affects Thunderbird < 78 and Firefox < 78.0.2.
- Record
UBUNTU-CVE-2020-15648- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N - Updated
- 2026-11-02
OSVMGASA-2020-0378 No score
Updated Thunderbird packages fix security vulnerabilities
AppCache manifest poisoning due to url encoded character processing (CVE-2020-12415).
Use-after-free in WebRTC VideoBroadcaster (CVE-2020-12416).
Integer overflow in nsJPEGEncoder::emptyOutputBuffer (CVE-2020-12422).
WebRTC permission prompt could have been bypassed by a compromised content process (CVE-2020-12424).
Out of bound read in Date.parse() (CVE-2020-12425).
Memory safety bugs fixed in Thunderbird 78 (CVE-2020-12426).
X-Frame-Options bypass using object or embed tags (CVE-2020-15648).
Memory safety bugs fixed in Thunderbird 78.3 (CVE-2020-15673).
XSS when pasting attacker-controlled data into a contenteditable element (CVE-2020-15676).
Download origin spoofing via redirect (CVE-2020-15677).
When recursing through layers while scrolling, an iterator may have become invalid, resulting in a potential use-after-free scenario (CVE-2020-15678).
Note that Enigmail will no longer let you manage your PGP keys, but instead will only provide a migration tool. Thunderbird will no longer use the system keyring and GnuPG; instead, it will handle PGP keys internally.
To use your existing PGP keys with Thunderbird 78 and above, you must use the migration tool from Enigmail upon the first Thunderbird run. See the migration notes on the Mageia wiki.
Also note that, to protect your keys, you should define a master password in Thunderbird.
- Record
MGASA-2020-0378- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
thunderbirdMageia:7 From an advisory covering 11 CVEs |
before 78.3.1-3.mga7 | 78.3.1-3.mga7 |
thunderbird-l10nMageia:7 From an advisory covering 11 CVEs |
before 78.3.1-1.mga7 | 78.3.1-1.mga7 |
firefoxRed Hat:rhel_e4s:8.0::appstream From an advisory covering 10 CVEs |
before 0:78.2.0-3.el8_0 | 0:78.2.0-3.el8_0 |
firefox-debuginfoRed Hat:rhel_e4s:8.0::appstream From an advisory covering 10 CVEs |
before 0:78.2.0-3.el8_0 | 0:78.2.0-3.el8_0 |
firefox-debugsourceRed Hat:rhel_e4s:8.0::appstream From an advisory covering 10 CVEs |
before 0:78.2.0-3.el8_0 | 0:78.2.0-3.el8_0 |
firefoxRed Hat:enterprise_linux:8::appstream From an advisory covering 11 CVEs |
before 0:78.2.0-2.el8_2 | 0:78.2.0-2.el8_2 |
firefox-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 11 CVEs |
before 0:78.2.0-2.el8_2 | 0:78.2.0-2.el8_2 |
firefox-debugsourceRed Hat:enterprise_linux:8::appstream From an advisory covering 11 CVEs |
before 0:78.2.0-2.el8_2 | 0:78.2.0-2.el8_2 |
firefoxRed Hat:rhel_eus:8.1::appstream From an advisory covering 10 CVEs |
before 0:78.2.0-3.el8_1 | 0:78.2.0-3.el8_1 |
firefox-debuginfoRed Hat:rhel_eus:8.1::appstream From an advisory covering 10 CVEs |
before 0:78.2.0-3.el8_1 | 0:78.2.0-3.el8_1 |
Show 16 moreShow less
| Package | Affected | Fixed |
|---|---|---|
firefox-debugsourceRed Hat:rhel_eus:8.1::appstream From an advisory covering 10 CVEs |
before 0:78.2.0-3.el8_1 | 0:78.2.0-3.el8_1 |
firefoxRed Hat:enterprise_linux:7::client From an advisory covering 12 CVEs |
before 0:78.3.0-1.el7_9 | 0:78.3.0-1.el7_9 |
firefox-debuginfoRed Hat:enterprise_linux:7::client From an advisory covering 12 CVEs |
before 0:78.3.0-1.el7_9 | 0:78.3.0-1.el7_9 |
firefoxRed Hat:enterprise_linux:7::server From an advisory covering 12 CVEs |
before 0:78.3.0-1.el7_9 | 0:78.3.0-1.el7_9 |
firefox-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 12 CVEs |
before 0:78.3.0-1.el7_9 | 0:78.3.0-1.el7_9 |
firefoxRed Hat:enterprise_linux:7::workstation From an advisory covering 12 CVEs |
before 0:78.3.0-1.el7_9 | 0:78.3.0-1.el7_9 |
firefox-debuginfoRed Hat:enterprise_linux:7::workstation From an advisory covering 12 CVEs |
before 0:78.3.0-1.el7_9 | 0:78.3.0-1.el7_9 |
firefoxUbuntu:16.04:LTS |
before 79.0+build1-0ubuntu0.16.04.2, plus listed versions 41.0.2+build2-0ubuntu142.0+build2-0ubuntu144.0+build3-0ubuntu244.0.1+build1-0ubuntu144.0.2+build1-0ubuntu1 Show 45 moreShow less45.0+build2-0ubuntu145.0.1+build1-0ubuntu145.0.2+build1-0ubuntu146.0+build5-0ubuntu0.16.04.246.0.1+build1-0ubuntu0.16.04.247.0+build3-0ubuntu0.16.04.148.0+build2-0ubuntu0.16.04.149.0+build4-0ubuntu0.16.04.149.0.2+build2-0ubuntu0.16.04.250.0+build2-0ubuntu0.16.04.250.0.2+build1-0ubuntu0.16.04.150.1.0+build2-0ubuntu0.16.04.151.0.1+build2-0ubuntu0.16.04.151.0.1+build2-0ubuntu0.16.04.252.0+build2-0ubuntu0.16.04.152.0.1+build2-0ubuntu0.16.04.152.0.2+build1-0ubuntu0.16.04.153.0+build6-0ubuntu0.16.04.153.0.2+build1-0ubuntu0.16.04.253.0.3+build1-0ubuntu0.16.04.254.0+build3-0ubuntu0.16.04.155.0.1+build2-0ubuntu0.16.04.255.0.2+build1-0ubuntu0.16.04.156.0+build6-0ubuntu0.16.04.156.0+build6-0ubuntu0.16.04.257.0+build4-0ubuntu0.16.04.557.0+build4-0ubuntu0.16.04.657.0.1+build2-0ubuntu0.16.04.157.0.3+build1-0ubuntu0.16.04.157.0.4+build1-0ubuntu0.16.04.158.0+build6-0ubuntu0.16.04.158.0.1+build1-0ubuntu0.16.04.158.0.2+build1-0ubuntu0.16.04.159.0+build5-0ubuntu0.16.04.159.0.1+build1-0ubuntu0.16.04.159.0.2+build1-0ubuntu0.16.04.159.0.2+build1-0ubuntu0.16.04.360.0+build2-0ubuntu0.16.04.160.0.1+build2-0ubuntu0.16.04.160.0.2+build1-0ubuntu0.16.04.161.0+build3-0ubuntu0.16.04.261.0.1+build1-0ubuntu0.16.04.162.0+build2-0ubuntu0.16.04.362.0+build2-0ubuntu0.16.04.462.0+build2-0ubuntu0.16.04.5 |
79.0+build1-0ubuntu0.16.04.2 |
firefoxUbuntu:18.04:LTS |
before 79.0+build1-0ubuntu0.18.04.1, plus listed versions 56.0+build6-0ubuntu157.0.1+build2-0ubuntu159.0.1+build1-0ubuntu159.0.2+build1-0ubuntu160.0+build2-0ubuntu1 Show 45 moreShow less60.0.1+build2-0ubuntu0.18.04.160.0.2+build1-0ubuntu0.18.04.161.0+build3-0ubuntu0.18.04.161.0.1+build1-0ubuntu0.18.04.162.0+build2-0ubuntu0.18.04.362.0+build2-0ubuntu0.18.04.462.0+build2-0ubuntu0.18.04.562.0.3+build1-0ubuntu0.18.04.163.0+build2-0ubuntu0.18.04.263.0.3+build1-0ubuntu0.18.04.164.0+build3-0ubuntu0.18.04.165.0+build2-0ubuntu0.18.04.165.0.1+build2-0ubuntu0.18.04.166.0+build3-0ubuntu0.18.04.166.0.1+build1-0ubuntu0.18.04.166.0.2+build1-0ubuntu0.18.04.166.0.3+build1-0ubuntu0.18.04.166.0.4+build3-0ubuntu0.18.04.166.0.5+build1-0ubuntu0.18.04.167.0+build2-0ubuntu0.18.04.167.0.1+build1-0ubuntu0.18.04.167.0.2+build2-0ubuntu0.18.04.167.0.3+build1-0ubuntu0.18.04.167.0.4+build1-0ubuntu0.18.04.168.0+build3-0ubuntu0.18.04.168.0.1+build1-0ubuntu0.18.04.168.0.2+build1-0ubuntu0.18.04.169.0+build2-0ubuntu0.18.04.169.0.1+build1-0ubuntu0.18.04.169.0.2+build1-0ubuntu0.18.04.170.0+build2-0ubuntu0.18.04.170.0.1+build1-0ubuntu0.18.04.171.0+build5-0ubuntu0.18.04.172.0.1+build1-0ubuntu0.18.04.172.0.2+build1-0ubuntu0.18.04.173.0+build3-0ubuntu0.18.04.173.0.1+build1-0ubuntu0.18.04.174.0+build3-0ubuntu0.18.04.174.0.1+build1-0ubuntu0.18.04.175.0+build3-0ubuntu0.18.04.176.0+build2-0ubuntu0.18.04.176.0.1+build1-0ubuntu0.18.04.177.0.1+build1-0ubuntu0.18.04.178.0.1+build1-0ubuntu0.18.04.178.0.2+build2-0ubuntu0.18.04.1 |
79.0+build1-0ubuntu0.18.04.1 |
thunderbirdUbuntu:18.04:LTS |
before 1:78.8.1+build1-0ubuntu0.18.04.1, plus listed versions 1:52.4.0+build1-0ubuntu21:52.6.0+build1-0ubuntu11:52.7.0+build1-0ubuntu11:52.8.0+build1-0ubuntu0.18.04.11:52.9.1+build3-0ubuntu0.18.04.1 Show 15 moreShow less1:60.2.1+build1-0ubuntu0.18.04.21:60.4.0+build2-0ubuntu0.18.04.11:60.5.1+build2-0ubuntu0.18.04.11:60.6.1+build2-0ubuntu0.18.04.11:60.7.0+build1-0ubuntu0.18.04.11:60.7.1+build1-0ubuntu0.18.04.11:60.7.2+build2-0ubuntu0.18.04.11:60.8.0+build1-0ubuntu0.18.04.11:60.9.0+build1-0ubuntu0.18.04.11:68.2.1+build1-0ubuntu0.18.04.11:68.2.2+build1-0ubuntu0.18.04.11:68.4.1+build1-0ubuntu0.18.04.11:68.7.0+build1-0ubuntu0.18.04.11:68.8.0+build2-0ubuntu0.18.04.21:68.10.0+build1-0ubuntu0.18.04.1 |
1:78.8.1+build1-0ubuntu0.18.04.1 |
mozjs52Ubuntu:18.04:LTS |
All versions, plus listed versions 52.3.1-0ubuntu352.3.1-7fakesync152.8.1-0ubuntu0.18.04.152.9.1-0ubuntu0.18.04.1 |
None known |
mozjs38Ubuntu:18.04:LTS |
All versions, plus listed versions 38.8.0~repack1-0ubuntu138.8.0~repack1-0ubuntu338.8.0~repack1-0ubuntu4 |
None known |
firefoxUbuntu:20.04:LTS |
before 79.0+build1-0ubuntu0.20.04.1, plus listed versions 69.0.3+build1-0ubuntu170.0+build2-0ubuntu170.0+build2-0ubuntu270.0.1+build1-0ubuntu271.0+build2-0ubuntu2 Show 17 moreShow less71.0+build5-0ubuntu172.0.1+build1-0ubuntu172.0.2+build1-0ubuntu173.0+build1-0ubuntu173.0+build2-0ubuntu173.0+build3-0ubuntu173.0.1+build1-0ubuntu174.0+build1-0ubuntu174.0+build2-0ubuntu174.0+build2-0ubuntu274.0+build3-0ubuntu175.0+build3-0ubuntu176.0+build2-0ubuntu0.20.04.176.0.1+build1-0ubuntu0.20.04.177.0.1+build1-0ubuntu0.20.04.178.0.1+build1-0ubuntu0.20.04.178.0.2+build2-0ubuntu0.20.04.1 |
79.0+build1-0ubuntu0.20.04.1 |
thunderbirdUbuntu:20.04:LTS |
before 1:78.7.1+build1-0ubuntu0.20.04.1, plus listed versions 1:68.1.2+build1-0ubuntu11:68.1.2+build1-0ubuntu21:68.2.1+build1-0ubuntu11:68.2.2+build1-0ubuntu11:68.3.0+build2-0ubuntu1 Show 9 moreShow less1:68.3.1+build1-0ubuntu21:68.4.1+build1-0ubuntu11:68.4.2+build2-0ubuntu11:68.5.0+build1-0ubuntu11:68.6.0+build2-0ubuntu11:68.7.0+build1-0ubuntu11:68.7.0+build1-0ubuntu21:68.8.0+build2-0ubuntu0.20.04.21:68.10.0+build1-0ubuntu0.20.04.1 |
1:78.7.1+build1-0ubuntu0.20.04.1 |
mozjs68Ubuntu:20.04:LTS |
All versions, plus listed versions 68.5.0-1~fakesync68.5.0-2~fakesync68.6.0-168.6.0-1ubuntu1 |
None known |
mozjs52Ubuntu:20.04:LTS |
All versions, plus listed versions 52.9.1-1build152.9.1-1ubuntu3 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2020-15648 is a medium vulnerability (CVSS 6.5) in Mozilla Firefox, published August 10, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.14%, the 66th percentile. Fixed in firefox 79.0+build1-0ubuntu0.16.04.2.
References
mozilla.org/security/advisories/mfsa2020-29
bugzilla.mozilla.org/show_bug.cgi?id=1644076
nvd.nist.gov/vuln/detail/CVE-2020-15648
github.com/advisories/GHSA-jrmg-2w74-rwc9
advisories.mageia.org/MGASA-2020-0378.html
Show 89 moreShow less
bugs.mageia.org/show_bug.cgi?id=26965
thunderbird.net/en-US/thunderbird/78.0/releasenotes
wiki.mageia.org/en/Migration_from_Thunderbird_68_and_Enigmail_to_Thunderbird_78
access.redhat.com/errata/RHSA-2020:3555
bugzilla.redhat.com/show_bug.cgi?id=1861645
security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_3555.json
cve.org/CVERecord?id=CVE-2020-12422
ubuntu.com/security/CVE-2020-15648
Left out here: 37 versions. The JSON record has them.