security@mozilla.org
organization01
roles
Roles this identity holds.
02
references
Other names and identifiers for this entity.
nvdUS security@mozilla.org
03
assessed vulnerabilities (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-6703US | medium6.5 | — | ||
Improper Input Validation vulnerability in Mozilla neqo leads to an unexploitable crash..This issue affects neqo: from 0.4.24 through 0.13.2. | ||||
| CVE-2024-12224US | high8.8 | — | ||
Improper Validation of Unsafe Equivalence in punycode by the idna crate from Servo rust-url allows an attacker to create a punycode hostname that one part of a system might treat a… | ||||
| CVE-2020-6804US | medium6.1 | — | ||
A reflected XSS vulnerability exists within the gateway, allowing an attacker to craft a specialized URL which could steal the user's authentication token. When combined with CVE-2… | ||||
| CVE-2020-6803US | medium6.1 | — | ||
An open redirect is present on the gateway's login page, which could cause a user to be redirected to a malicious site after logging in. | ||||