vulnerability

Alpine Linux: CVE-2020-15649: Unrestricted Upload of File with Dangerous Type

Severity
4
CVSS
(AV:N/AC:M/Au:N/C:P/I:N/A:N)
Published
Aug 10, 2020
Added
Oct 1, 2024
Modified
Dec 22, 2025

Description

Given an installed malicious file picker application, an attacker was able to steal and upload local files of their choosing, regardless of the actually files picked. *Note: This issue only affected Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox ESR < 68.11.

Solutions

alpine-linux-upgrade-firefox-esralpine-linux-upgrade-mozjs68
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.