CVE:CVE-2020-26958
CNNVD:CNNVD-202011-1509
Mozilla Firefox ESR是美国Mozilla基金会的Firefox(Web浏览器)的一个延长支持版本。
FireFox 存在跨站脚本漏洞，该漏洞源于当响应被拦截并通过ServiceWorker缓存时，Firefox没有阻止使用不正确MIME类型的脚本的执行。这可能导致跨站点脚本包含漏洞，或者绕过内容安全策略。
solution:Upgrade mozilla firefox to a higher version than 83.0,and avoid the version (,83.0); Upgrade mozilla firefox_esr to a higher version than 78.5,and avoid the version (,78.5); Upgrade mozilla thunderbird to a higher version than 78.5,and avoid the version (,78.5)