Lucene search
Veracode Vulnerability DatabaseVERACODE:22350HistoryJan 23, 2020 - 6:12 a.m.
Authorization Bypass
2020-01-2306:12:27
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
EPSS
0.001
Percentile
50.8%
secure_headers is vulnerable to authorization bypass. A semicolon character can be used to inject additional values and override arbitrary directives in the Content-Security-Policy header via append/override_content_security_policy_directives.
Related
rubygems
rubygems
secure_headers directive injection using semicolon
2020-01-22 21:00:00
github
github
Directive injection when using dynamic overrides with user input
2020-01-23 02:28:11
ubuntucve
ubuntucve
CVE-2020-5217
2020-01-23 00:00:00
prion
prion
Code injection
2020-01-23 03:15:00
redhatcve
redhatcve
CVE-2020-5217
2020-02-10 14:44:34
nvd
nvd
CVE-2020-5217
2020-01-23 03:15:10
osv
osv
Directive injection when using dynamic overrides with user input
2020-01-23 02:28:11
CVE-2020-5217
2020-01-23 03:15:10
debiancve
debiancve
CVE-2020-5217
2020-01-23 03:15:10
cve
cve
CVE-2020-5217
2020-01-23 03:15:10
cvelist
cvelist
redhat
redhat
(RHSA-2020:4366) Important: Satellite 6.8 release
2020-10-27 12:45:25
nessus
nessus
RHEL 7 : Satellite 6.8 (Important) (RHSA-2020:4366)
2020-11-04 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1966
2021-07-02 18:06:34