Previewing a response in Devtools ignored CSP headers, which could have allowed content injection attacks. This vulnerability was fixed in Firefox 139 and Thunderbird 139...
6.5CVSS5.8AI score0.00267EPSS
SaveExploits0References3
OSV•added 2025/05/27 1:15 p.m.•7 views
CVE-2025-5271
Previewing a response in Devtools ignored CSP headers, which could have allowed content injection attacks. This vulnerability affects Firefox 139 and Thunderbird 139...
6.5CVSS5.8AI score0.00267EPSS
SaveExploits0References3
OSV•added 2025/05/27 1:15 p.m.•4 views
UBUNTU-CVE-2025-5271
Previewing a response in Devtools ignored CSP headers, which could have allowed content injection attacks. This vulnerability affects Firefox 139 and Thunderbird 139...