Lucene search

K
cvelistMozillaCVELIST:CVE-2024-0747
HistoryJan 23, 2024 - 1:48 p.m.

CVE-2024-0747

2024-01-2313:48:16
mozilla
raw.githubusercontent.com
2
parent page
iframe
unsafe-inline
content security policy
firefox
thunderbird
cve-2024-0747

5.7 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

22.3%

When a parent page loaded a child in an iframe with unsafe-inline, the parent Content Security Policy could have overridden the child Content Security Policy. This vulnerability affects Firefox < 122, Firefox ESR < 115.7, and Thunderbird < 115.7.