Astra Linux – Vulnerability in Firefox, Thunderbird

Security policy violation events could have revealed cross-origin information due to violations of frame-ancestor rules. This vulnerability affects Firefox ESR versions earlier than 91.5, Firefox versions earlier than 96, and Thunderbird versions earlier than 91.5...

PT-2024-1838

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 122.0.6261.57 Description The issue is related to an inappropriate implementation in the Content Security Policy CSP mechanism of Google Chrome, allowing a remote attacker to bypass existing security restriction...

Mozilla: Leaking cross-origin URLs through securitypolicyviolation event

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as: Securitypolicyviolation events could have leaked cross-origin information for frame-ancestors violations...