CVE-2020-12413

CVE-2020-12413 describes the Raccoon attack, a timing vulnerability affecting DHE ciphersuites within the TLS specification, specifically impacting Mozilla Firefox and Firefox ESR. This medium-severity vulnerability (CVSS 5.9) allows a remote attacker to potentially decrypt TLS connections due to high attack complexity but without requiring user interaction. While Firefox has mitigated this by disabling DHE support, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion, though it did receive limited media coverage.