Beveiligingsadvies

CVE-2021-23968

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2021-02-26 01:59:36

Laatst bijgewerkt 2024-08-03 19:14:09

Toegewezen door mozilla

CVSS-score geen score

Status PUBLISHED

Beschrijving

If Content Security Policy blocked frame navigation, the full destination of a redirect served in the frame was reported in the violation report; as opposed to the original frame URI. This could be used to leak sensitive information contained in such URIs. This vulnerability affects Firefox < 86, Thunderbird < 78.8, and Firefox ESR < 78.8.

← Alle CVE's bekijken Bekijk op cve.org ↗