CVE-2019-11737

If a wildcard ('*') is specified for the host in Content Security Policy (CSP) directives, any port or path restriction of the directive will be ignored…

published September 27, 2019

CVSS
—
EPSS
1%
Percentile
45.0
In the wild
Unconfirmed
What it is

If a wildcard ('*') is specified for the host in Content Security Policy (CSP) directives, any port or path restriction of the directive will be ignored, leading to CSP directives not being properly applied to content. This vulnerability affects Firefox < 69.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00546 · 45.0th percentile
Published
2019-09-27T17:20Z
EPSS history
Timeline
  • 27 SEP 17:20Z
    If a wildcard ('*') is specified for the host in Content Security Policy (CSP) directives, any port or path restriction of the directive will be ignored…
    cvelistv5