Beveiligingsadvies

CVE-2019-11737

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2019-09-27 17:20:17
Laatst bijgewerkt 2024-08-04 23:03:32
Toegewezen door mozilla
CVSS-score geen score
Status PUBLISHED

Beschrijving

If a wildcard ('*') is specified for the host in Content Security Policy (CSP) directives, any port or path restriction of the directive will be ignored, leading to CSP directives not being properly applied to content. This vulnerability affects Firefox < 69.