CVE-2019-11737: Medium severity firefox vulnerability
If a wildcard ('') is specified for the host in Content Security Policy (CSP) directives, any port or path restriction of the directive will be ignored, leading to CSP directives not being properly applied to content.
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is CVE-2019-11737?
CVE-2019-11737 is a vulnerability that affects Mozilla Firefox versions up to and including version 69.
What is the severity of CVE-2019-11737?
CVE-2019-11737 has a low severity rating.
How does CVE-2019-11737 impact Content Security Policy (CSP) directives?
If a wildcard (*) is specified for the host in CSP directives, any port or path restriction of the directive will be ignored, leading to CSP directives not being properly applied to content.
Which software is affected by CVE-2019-11737?
Mozilla Firefox versions up to and including version 69 are affected by CVE-2019-11737.
How can I fix the CVE-2019-11737 vulnerability?
Update your Mozilla Firefox browser to version 69 or higher to fix the CVE-2019-11737 vulnerability.