A Content-Security-Policy that blocks in-line scripts could be bypassed using an object tag to execute JavaScript in the protected document (cross-site scripting). This is a separate bypass from CVE-2019-17000.*Note: This flaw only affected Firefox 69 and was not present in earlier versions.*. This vulnerability affects Firefox < 70.

Available Exploits

No exploits available for this CVE.

Related News

No news articles found for this CVE.

Affected Products

Mozilla

Firefox

Affected Versions:

before 70

References

https://bugzilla.mozilla.org/show_bug.cgi?id=1587976

https://www.mozilla.org/security/advisories/mfsa2019-34/

Published: 2020-01-08T21:41:25

Last Modified: 2024-08-05T01:24:48.679Z

Copied to clipboard!