{"id":"CVE-2020-15662","aliases":["EUVD-2020-7649","GHSA-vhp9-5mw9-c7wp"],"status":"published","title":"A rogue webpage could override the injected WKUserScript used by the download feature, this...","description":"A rogue webpage could override the injected WKUserScript used by the download feature, this exploit could result in the user downloading an unintended file. This vulnerability affects Firefox for iOS \u003c 28.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.0068,"percentile":0.52675,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2020-08-10T17:43:23Z","modified":"2026-10-24T10:30:37Z","products":[{"vendor":"mozilla","product":"firefox for ios"},{"vendor":"mozilla","product":"firefox_mobile"}],"references":[{"url":"https://www.mozilla.org/security/advisories/mfsa2020-34/","tags":["x_refsource_MISC","x_transferred","Vendor Advisory","advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1653827","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Permissions Required","Vendor Advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-15662"},{"url":"https://www.mozilla.org/security/advisories/mfsa2020-34"},{"url":"https://github.com/advisories/GHSA-vhp9-5mw9-c7wp"}],"sources":{"cve":[{"id":"CVE-2020-15662","description":"A rogue webpage could override the injected WKUserScript used by the download feature, this exploit could result in the user downloading an unintended file. This vulnerability affects Firefox for iOS \u003c 28.","status":"published","published":"2020-08-10T17:43:23Z","modified":"2024-08-04T13:22:30.615Z","updated_at":"2026-11-02T14:35:50.228781Z"}],"euvd":[{"id":"EUVD-2020-7649","description":"A rogue webpage could override the injected WKUserScript used by the download feature, this exploit could result in the user downloading an unintended file. This vulnerability affects Firefox for iOS \u003c 28.","status":"published","published":"2020-08-10T17:43:23Z","modified":"2024-08-04T13:22:30Z","updated_at":"2026-11-03T03:07:30.980066Z"}],"ghsa":[{"id":"GHSA-vhp9-5mw9-c7wp","title":"A rogue webpage could override the injected WKUserScript used by the download feature, this...","description":"A rogue webpage could override the injected WKUserScript used by the download feature, this exploit could result in the user downloading an unintended file. This vulnerability affects Firefox for iOS \u003c 28.","status":"published","published":"2022-05-24T17:25:12Z","modified":"2026-08-19T15:31:50Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:10:38.677871Z"}],"nvd":[{"id":"CVE-2020-15662","description":"A rogue webpage could override the injected WKUserScript used by the download feature, this exploit could result in the user downloading an unintended file. This vulnerability affects Firefox for iOS \u003c 28.","status":"published","published":"2020-08-10T18:15:12.827Z","modified":"2026-08-19T15:30:33.807Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:06:10.994748Z"}],"osv":[{"id":"CVE-2020-15662","description":"A rogue webpage could override the injected WKUserScript used by the download feature, this exploit could result in the user downloading an unintended file. This vulnerability affects Firefox for iOS \u003c 28.","status":"published","published":"2020-08-10T18:15:12.827Z","modified":"2026-10-24T10:30:37.524845723Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:14.828228Z"}]}}