CVE-2020-12391 – Documents formed using data: URLs in an OBJECT element failed to inherit the CSP of the cr …

Vuln ID: CVE-2020-12391

Published:  2020-05-26  18:15:11Z

Description: Documents formed using data: URLs in an OBJECT element failed to inherit the CSP of the creating context. This allowed the execution of scripts that should have been blocked, albeit with a unique opaque origin. This vulnerability affects Firefox < 76.

Source: NVD.NIST.GOV

 


Date:

Categorie(s):

Tag(s):