Lucene search

K
redhatcveRedhat.comRH:CVE-2020-6813
HistoryApr 29, 2020 - 12:39 p.m.

CVE-2020-6813

2020-04-2912:39:57
redhat.com
access.redhat.com
12

0.001 Low

EPSS

Percentile

36.2%

When protecting CSS blocks with the nonce feature of Content Security Policy, the @import statement in the CSS block could allow an attacker to inject arbitrary styles, bypassing the intent of the Content Security Policy. This vulnerability affects Firefox < 74.