Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fmq6-m827-77jc

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

If a wildcard ('*') is specified for the host in Content Security Policy (CSP) directives, any port or path restriction of the directive will be ignored, leading to CSP directives not being properly applied to content. This vulnerability affects Firefox < 69.

If a wildcard ('*') is specified for the host in Content Security Policy (CSP) directives, any port or path restriction of the directive will be ignored, leading to CSP directives not being properly applied to content. This vulnerability affects Firefox < 69.

EPSS

Процентиль: 43%
0.00546
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-345

Связанные уязвимости

CVSS3: 5.3
ubuntu
почти 7 лет назад

If a wildcard ('*') is specified for the host in Content Security Policy (CSP) directives, any port or path restriction of the directive will be ignored, leading to CSP directives not being properly applied to content. This vulnerability affects Firefox < 69.

CVSS3: 5.3
redhat
почти 7 лет назад

If a wildcard ('*') is specified for the host in Content Security Policy (CSP) directives, any port or path restriction of the directive will be ignored, leading to CSP directives not being properly applied to content. This vulnerability affects Firefox < 69.

CVSS3: 5.3
nvd
почти 7 лет назад

If a wildcard ('*') is specified for the host in Content Security Policy (CSP) directives, any port or path restriction of the directive will be ignored, leading to CSP directives not being properly applied to content. This vulnerability affects Firefox < 69.

CVSS3: 5.3
debian
почти 7 лет назад

If a wildcard ('*') is specified for the host in Content Security Poli ...

CVSS3: 5.3
fstec
почти 7 лет назад

Уязвимость браузера Firefox, связанная с недостаточной проверкой подлинности данных, позволяющая нарушителю нарушить целостность данных

EPSS

Процентиль: 43%
0.00546
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-345