Unrated severityNVD Advisory· Published Sep 27, 2019· Updated Aug 4, 2024
CVE-2019-11737
CVE-2019-11737
Description
If a wildcard ('*') is specified for the host in Content Security Policy (CSP) directives, any port or path restriction of the directive will be ignored, leading to CSP directives not being properly applied to content. This vulnerability affects Firefox < 69.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4<69+ 1 more
- (no CPE)range: <69
- (no CPE)range: unspecified
- osv-coords2 versionspkg:rpm/opensuse/firefox-esr&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/MozillaFirefox&distro=openSUSE%20Tumbleweed
< 128.5.1-1.1+ 1 more
- (no CPE)range: < 128.5.1-1.1
- (no CPE)range: < 92.0-1.2
Patches
Vulnerability mechanics
References
2- bugzilla.mozilla.org/show_bug.cgimitrex_refsource_MISC
- www.mozilla.org/security/advisories/mfsa2019-25/mitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.