Vulnetix
Try Vulnetix Request Demo
CVE-2020-6813 PUBLISHED

When protecting CSS blocks with the nonce feature of Content Security Policy, the @import statement in the CSS block could allow an attacker to inject arbitrary styles, bypassing the intent of the Content Security Policy. This vulnerability affects Firefox < 74.

EPSS 0.18% · 38.8th percentile

Risk Scores

EPSS Score
0.18%
38.8th percentile

Affected Products

VendorProductVersions
Ubuntu:18.04:LTSmozjs5252.9.1-0ubuntu0.18.04.1, 52.8.1-0ubuntu0.18.04.1, 52.3.1-7fakesync1
Ubuntu:16.04:LTSfirefox44.0.2+build1-0ubuntu1, 45.0+build2-0ubuntu1, 45.0.1+build1-0ubuntu1
Ubuntu:18.04:LTSmozjs380, 38.8.0~repack1-0ubuntu1, 38.8.0~repack1-0ubuntu3
Ubuntu:18.04:LTSfirefox61.0.1+build1-0ubuntu0.18.04.1, 62.0+build2-0ubuntu0.18.04.3, 62.0+build2-0ubuntu0.18.04.4
Ubuntu:20.04:LTSfirefox0, 69.0.3+build1-0ubuntu1, 70.0+build2-0ubuntu1
Ubuntu:20.04:LTSmozjs520, 52.9.1-1build1, 52.9.1-1ubuntu3

Timeline

References

Open in Interactive Console →