{"id":"CVE-2020-6830","aliases":["EUVD-2020-27974","GHSA-3j75-7jc2-vqcg"],"status":"published","title":"For native-to-JS bridging, the app requires a unique token to be passed that ensures non-app code...","description":"For native-to-JS bridging, the app requires a unique token to be passed that ensures non-app code can't call the bridging functions. That token was being used for JS-to-native also, but it isn't needed in this case, and its usage was also leaking this token. This vulnerability affects Firefox for iOS \u003c 25.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.0091,"percentile":0.60287,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200"],"published":"2020-05-26T17:06:52Z","modified":"2026-10-24T10:30:59Z","products":[{"vendor":"mozilla","product":"firefox for ios"},{"vendor":"mozilla","product":"firefox_mobile"}],"references":[{"url":"https://www.mozilla.org/security/advisories/mfsa2020-15/","tags":["x_refsource_MISC","x_transferred","Vendor Advisory","advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1632387","tags":["x_refsource_MISC","x_transferred","Permissions Required","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-6830"},{"url":"https://www.mozilla.org/security/advisories/mfsa2020-15"},{"url":"https://github.com/advisories/GHSA-3j75-7jc2-vqcg"}],"sources":{"cve":[{"id":"CVE-2020-6830","description":"For native-to-JS bridging, the app requires a unique token to be passed that ensures non-app code can't call the bridging functions. That token was being used for JS-to-native also, but it isn't needed in this case, and its usage was also leaking this token. This vulnerability affects Firefox for iOS \u003c 25.","status":"published","published":"2020-05-26T17:06:52Z","modified":"2024-08-04T09:11:05.047Z","updated_at":"2026-11-02T14:35:52.592504Z"}],"euvd":[{"id":"EUVD-2020-27974","description":"For native-to-JS bridging, the app requires a unique token to be passed that ensures non-app code can't call the bridging functions. That token was being used for JS-to-native also, but it isn't needed in this case, and its usage was also leaking this token. This vulnerability affects Firefox for iOS \u003c 25.","status":"published","published":"2020-05-26T17:06:52Z","modified":"2024-08-04T09:11:05Z","updated_at":"2026-11-03T03:08:01.566283Z"}],"ghsa":[{"id":"GHSA-3j75-7jc2-vqcg","title":"For native-to-JS bridging, the app requires a unique token to be passed that ensures non-app code...","description":"For native-to-JS bridging, the app requires a unique token to be passed that ensures non-app code can't call the bridging functions. That token was being used for JS-to-native also, but it isn't needed in this case, and its usage was also leaking this token. This vulnerability affects Firefox for iOS \u003c 25.","status":"published","published":"2022-05-24T17:18:42Z","modified":"2026-08-19T15:31:49Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T15:10:38.677871Z"}],"nvd":[{"id":"CVE-2020-6830","description":"For native-to-JS bridging, the app requires a unique token to be passed that ensures non-app code can't call the bridging functions. That token was being used for JS-to-native also, but it isn't needed in this case, and its usage was also leaking this token. This vulnerability affects Firefox for iOS \u003c 25.","status":"published","published":"2020-05-26T18:15:11.45Z","modified":"2026-08-19T15:30:33.807Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:06:04.922138Z"}],"osv":[{"id":"CVE-2020-6830","description":"For native-to-JS bridging, the app requires a unique token to be passed that ensures non-app code can't call the bridging functions. That token was being used for JS-to-native also, but it isn't needed in this case, and its usage was also leaking this token. This vulnerability affects Firefox for iOS \u003c 25.","status":"published","published":"2020-05-26T18:15:11.45Z","modified":"2026-10-24T10:30:59.991270518Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:44:17.34531Z"}]}}