Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fmq6-m827-77jc

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

If a wildcard ('*') is specified for the host in Content Security Policy (CSP) directives, any port or path restriction of the directive will be ignored, leading to CSP directives not being properly applied to content. This vulnerability affects Firefox < 69.

If a wildcard ('*') is specified for the host in Content Security Policy (CSP) directives, any port or path restriction of the directive will be ignored, leading to CSP directives not being properly applied to content. This vulnerability affects Firefox < 69.

EPSS

Процентиль: 33%
0.00133
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-345

Связанные уязвимости

CVSS3: 5.3
ubuntu
больше 6 лет назад

If a wildcard ('*') is specified for the host in Content Security Policy (CSP) directives, any port or path restriction of the directive will be ignored, leading to CSP directives not being properly applied to content. This vulnerability affects Firefox < 69.

CVSS3: 5.3
redhat
больше 6 лет назад

If a wildcard ('*') is specified for the host in Content Security Policy (CSP) directives, any port or path restriction of the directive will be ignored, leading to CSP directives not being properly applied to content. This vulnerability affects Firefox < 69.

CVSS3: 5.3
nvd
больше 6 лет назад

If a wildcard ('*') is specified for the host in Content Security Policy (CSP) directives, any port or path restriction of the directive will be ignored, leading to CSP directives not being properly applied to content. This vulnerability affects Firefox < 69.

CVSS3: 5.3
debian
больше 6 лет назад

If a wildcard ('*') is specified for the host in Content Security Poli ...

CVSS3: 5.3
fstec
больше 6 лет назад

Уязвимость браузера Firefox, связанная с недостаточной проверкой подлинности данных, позволяющая нарушителю нарушить целостность данных

EPSS

Процентиль: 33%
0.00133
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-345