CVE-2020-12408: Mozilla Firefox

Medium severity, CVSS 6.5. EPSS: 1% chance of exploitation in the next 30 days.

When browsing a document hosted on an IP address, an attacker could insert certain characters to flip domain and path information in the address bar. This vulnerability affects Firefox < 77.

Affected products

• Mozilla Firefox: before 77.0 (fixed in 77.0)

Published 2020-07-09. Last modified 2026-06-17.