Content security policy directives vulnerability in a wildcard host - CVE-2019-11737 (MacOS X)ID: oval:org.secpod.oval:def:58385 | Date: (C)2019-10-11 (M)2023-12-20 |
Class: VULNERABILITY | Family: macos |
Mozilla Firefox 69 : If a wildcard ('*') is specified for the host in Content Security Policy (CSP) directives, any port or path restriction of the directive will be ignored, leading to CSP directives not being properly applied to content.
Platform: |
Apple Mac OS 14 |
Apple Mac OS 13 |
Apple Mac OS 12 |
Apple Mac OS 11 |
Apple Mac OS X 10.15 |
Apple Mac OS X 10.10 |
Apple Mac OS X 10.11 |
Apple Mac OS X 10.12 |
Apple Mac OS X 10.13 |
Apple Mac OS X 10.14 |