CVE-2020-35111

When an extension with the proxy permission registered to receive <all_urls>, the proxy.onRequest callback was not triggered for view-source URLs. While web content cannot navigate to such URLs, a user opening View Source could have inadvertently leaked their IP address. This vulnerability affects Firefox < 84, Thunderbird < 78.6, and Firefox ESR < 78.6.

• https://bugzilla.mozilla.org/show_bug.cgi?id=1657916Permissions Required
• https://www.mozilla.org/security/advisories/mfsa2020-54/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2020-55/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2020-56/Vendor Advisory
• https://bugzilla.mozilla.org/show_bug.cgi?id=1657916Permissions Required
• https://www.mozilla.org/security/advisories/mfsa2020-54/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2020-55/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2020-56/Vendor Advisory

Published

Jan 7, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-3508A vulnerability in the IP Address Resolution Protocol (ARP) …7.4
• CVE-2020-3509A vulnerability in the DHCP message handler of Cisco IOS XE …8.6
• CVE-2020-35090Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2020-3510A vulnerability in the Umbrella Connector component of Cisco…8.6
• CVE-2020-3511A vulnerability in the ISDN subsystem of Cisco IOS Software …7.4
• CVE-2020-35110Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2020-35112If a user downloaded a file lacking an extension on Windows,…8.8
• CVE-2020-35113Mozilla developers reported memory safety bugs present in Fi…8.8
• CVE-2020-35114Mozilla developers reported memory safety bugs present in Fi…8.8
• CVE-2020-3512A vulnerability in the PROFINET handler for Link Layer Disco…7.4
• CVE-2020-35121An issue was discovered in the Keysight Database Connector p…8.8
• CVE-2020-35122An issue was discovered in the Keysight Database Connector p…7.5