Mozilla Firefox is an open source web browser from the Mozilla Foundation, U.S. An injection vulnerability exists in Mozilla Firefox, which stems from a failure to execute the Unsafe-Hashes CSP directive. An attacker could exploit this vulnerability to inject executable scripts.