| Package | Affected versions | Patched versions |
|---|---|---|
| firefox | = 69.0 |
A Content-Security-Policy that blocks in-line scripts could be bypassed using an object tag to execute JavaScript in the protected document (cross-site scripting). This is a separate bypass from CVE-2019-17000.*Note: This flaw only affected Firefox 69 and was not present in earlier versions.*. This vulnerability affects Firefox < 70.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free