CVE-2024-0747

2024-01-2314:15:38

Alpine Linux Development Team

security.alpinelinux.org

content security policy

iframe

firefox

thunderbird

vulnerability

6.2 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

22.7%

JSON

When a parent page loaded a child in an iframe with unsafe-inline, the parent Content Security Policy could have overridden the child Content Security Policy. This vulnerability affects Firefox < 122, Firefox ESR < 115.7, and Thunderbird < 115.7.

OSVersionArchitecturePackageVersionFilename
Alpine3.18-communitynoarchfirefox-esr< 115.7.0-r0UNKNOWN
Alpine3.19-communitynoarchfirefox-esr< 115.7.0-r0UNKNOWN