THREATOPS
THREAT OPS › Threat News › [NVD] CVE-2020-15666 (MEDIUM 6.5) — When trying to load a non-video in an audio/video context the exact status code (200, 302, 404, 500, 412, 403, etc.) was disclosed via the MediaError Message. This level of information leakage is inconsistent with the standardized onerror/onsuccess disclosure and can lead to infe

[NVD] CVE-2020-15666 (MEDIUM 6.5) — When trying to load a non-video in an audio/video context the exact status code (200, 302, 404, 500, 412, 403, etc.) was disclosed via the MediaError Message. This level of information leakage is inconsistent with the standardized onerror/onsuccess disclosure and can lead to infe

lownvdPublished 2020-10-01

CVE-2020-15666 CVSS: 6.5 MEDIUM Published: 2020-10-01T19:15:13.203

When trying to load a non-video in an audio/video context the exact status code (200, 302, 404, 500, 412, 403, etc.) was disclosed via the MediaError Message. This level of information leakage is inconsistent with the standardized onerror/onsuccess disclosure and can lead to inferring login status to services or device discovery o

Indicators of compromise

Original source: https://nvd.nist.gov/vuln/detail/CVE-2020-15666