system
Describe <CVE-2020-6823>.
user
What is <CVE-2020-6823>?
assistant
A malicious extension could have called <code>browser.identity.launchWebAuthFlow</code>, controlling the redirect_uri, and through the Promise returned, obtain the Auth code and gain access to the user's account at the service provider. This vulnerability affects Firefox < 75..