CVE-2020-15671

low

Description

When typing in a password under certain conditions, a race may have occured where the InputContext was not being correctly set for the input field, resulting in the typed password being saved to the keyboard dictionary. This vulnerability affects Firefox for Android < 80.

References

https://www.mozilla.org/security/advisories/mfsa2020-39/

https://bugzilla.mozilla.org/show_bug.cgi?id=1653862

Details

Source: Mitre, NVD

Published: 2020-10-01

Updated: 2026-06-17

Risk Information

CVSS v2

Base Score: 2.6

Vector: CVSS2#AV:N/AC:H/Au:N/C:P/I:N/A:N

Severity: Low

CVSS v3

Base Score: 3.1

Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

Severity: Low

EPSS

EPSS: 0.00141