Lucene search
Veracode Vulnerability DatabaseVERACODE:27945HistoryNov 20, 2020 - 9:43 a.m.
Content Security Bypass
2020-11-2009:43:17
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
16
0.001 Low
EPSS
Percentile
48.9%
firefox is vulnerable to content security policy bypass. The application does not block execution of scripts with incorrect MIME types when the response was intercepted and cached through a ServiceWorker. This could lead to a cross-site script inclusion vulnerability, or a Content Security Policy bypass.
References
access.redhat.com/security/cve/cve-2020-26958
bugzilla.mozilla.org/show_bug.cgi?id=1669355
www.mozilla.org/en-US/security/advisories/mfsa2020-51/#CVE-2020-26958
www.mozilla.org/security/advisories/mfsa2020-50/
www.mozilla.org/security/advisories/mfsa2020-51/
www.mozilla.org/security/advisories/mfsa2020-52/
Related
prion
prion
Design/Logic Flaw
2020-12-09 01:15:00
redhatcve
redhatcve
CVE-2020-26958
2020-11-18 01:09:11
cvelist
cvelist
CVE-2020-26958
2020-12-09 00:22:19
debiancve
debiancve
CVE-2020-26958
2020-12-09 01:15:13
cve
cve
CVE-2020-26958
2020-12-09 01:15:13
ubuntucve
ubuntucve
CVE-2020-26958
2020-11-17 00:00:00
alpinelinux
alpinelinux
CVE-2020-26958
2020-12-09 01:15:13
nvd
nvd
CVE-2020-26958
2020-12-09 01:15:13
oraclelinux
oraclelinux
thunderbird security update
2020-12-01 00:00:00
firefox security update
2020-12-01 00:00:00
firefox security update
2020-12-01 00:00:00
nessus
nessus
RHEL 7 : firefox (RHSA-2020:5239)
2020-12-01 00:00:00
CentOS 8 : firefox (CESA-2020:5237)
2021-02-01 00:00:00
Oracle Linux 6 : firefox (ELSA-2020-5257)
2021-02-04 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2020-0433)
2022-01-28 00:00:00
CentOS: Security Advisory for thunderbird (CESA-2020:5235)
2020-12-10 00:00:00
osv
osv
firefox-esr - security update
2020-11-19 00:00:00
firefox-esr - security update
2020-11-18 00:00:00
thunderbird - security update
2020-11-23 00:00:00
redhat
redhat
(RHSA-2020:5233) Important: firefox security update
2020-11-30 08:15:53
(RHSA-2020:5240) Important: thunderbird security update
2020-11-30 08:20:40
(RHSA-2020:5231) Important: thunderbird security update
2020-11-30 08:15:46
gentoo
gentoo
Mozilla Firefox: Multiple vulnerabilities
2020-12-07 00:00:00
Mozilla Thunderbird: Multiple vulnerabilities
2020-12-07 00:00:00
mageia
mageia
Updated thunderbird packages fix security vulnerabilities
2020-11-21 15:21:00
Updated firefox and nss packages fix security vulnerabilities
2020-11-19 11:52:41
centos
centos
firefox security update
2020-12-09 20:21:57
thunderbird security update
2020-12-09 20:24:41
debian
debian
[SECURITY] [DLA 2457-1] firefox-esr security update
2020-11-19 10:07:14
[SECURITY] [DSA 4796-1] thunderbird security update
2020-11-21 18:32:57
[SECURITY] [DSA 4793-1] firefox-esr security update
2020-11-18 18:44:22
altlinux
altlinux
Security fix for the ALT Linux 10 package thunderbird version 78.5.0-alt1
2020-11-19 00:00:00
Security fix for the ALT Linux 10 package firefox-esr version 78.5.0-alt1
2020-11-16 00:00:00
mozilla
mozilla
Security Vulnerabilities fixed in Firefox ESR 78.5 — Mozilla
2020-11-17 00:00:00
Security Vulnerabilities fixed in Thunderbird 78.5 — Mozilla
2020-11-17 00:00:00
Security Vulnerabilities fixed in Firefox 83 — Mozilla
2020-11-17 00:00:00
suse
suse
Security update for MozillaFirefox (important)
2020-12-22 00:00:00
Security update for MozillaThunderbird (important)
2020-11-28 00:00:00
Security update for MozillaFirefox (important)
2020-11-26 00:00:00
ibm
ibm
kaspersky
kaspersky
KLA12012 Multiple vulnerabilities in Mozilla Thunderbird
2020-11-17 00:00:00
KLA12010 Multiple vulnerabilities in Mozilla Firefox
2020-11-17 00:00:00
KLA12011 Multiple vulnerabilities in Mozilla Firefox ESR
2020-11-17 00:00:00
ubuntu
ubuntu
Thunderbird vulnerabilities
2020-11-25 00:00:00
Firefox vulnerabilities
2020-11-18 00:00:00
Firefox vulnerabilities
2020-11-19 00:00:00
archlinux
archlinux
[ASA-202011-12] firefox: multiple issues
2020-11-17 00:00:00
amazon
amazon
Important: thunderbird
2021-01-05 23:35:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1835
2021-07-02 16:43:38