CVE-2024-0747
When a parent page loaded a child in an iframe with `unsafe-inline`, the parent Content Security Policy could have overridden the child Content Security Policy. This vulnerabili…
Published: 2024-01-23 · CVSS: 6.5 · CVSS 3.1
When a parent page loaded a child in an iframe with `unsafe-inline`, the parent Content Security Policy could have overridden the child Content Security Policy. This vulnerability affects Firefox < 122, Firefox ESR < 115.7, and Thunderbird < 115.7.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7