CVE-2020-37190

Top Password Firefox Password Recovery 2.8 contains a denial of service vulnerability that allows attackers to crash the application by overflowing input fields. Attackers can trigger the vulnerability by inserting 5000 characters into the User Name or Registration Code input fields.

CVSS v4.0

4.6 MEDIUMCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS v3.1

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.28% chance of exploitation in the next 30 days, 20th percentile

Published

2026-02-11

Updated

2026-02-12

Proof-of-concept exploits (1)

• https://www.exploit-db.com/exploits/47912

References

• CVE Record
• NVD entry

Related

• CVE-2020-37189
• CVE-2020-37191
• CVE-2020-37188
• CVE-2020-37192
• CVE-2020-37187
• CVE-2020-37193