Aller au contenu
Non notée

CVE-2019-11737 If a wildcard ('*') is specified for the host in Content Security Policy (CSP) directives, any port or path…

Description

If a wildcard ('*') is specified for the host in Content Security Policy (CSP) directives, any port or path restriction of the directive will be ignored, leading to CSP directives not being properly applied to content. This vulnerability affects Firefox < 69.

Produits et versions touchés

Produit Versions touchées Corrigé en
Firefox 69 premières → < 69 69
Les 2221 CVE de Firefox →
Suivre cette CVE