Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 11:35:24 +0000 CVE-2023-23603 — Calls to console.log allowed bypassing Content Security Policy via format directive https://cve.radiocsirt.org/vuln/cve-2023-23603 <p><strong>Affected:</strong> Mozilla Firefox, Mozilla Firefox ESR, Mozilla Thunderbird</p> <p>Regular expressions used to filter out forbidden properties and values from style directives in calls to `console.log` weren&#39;t accounting for external URLs. Data could then be potentially exfiltrated from the browser. This vulnerability affects Firefox &lt; 109, Firefox ESR &lt; 102.7, and Thunderbird &lt; 102.7.</p> <p><strong>Affected:</strong> Mozilla Firefox, Mozilla Firefox ESR, Mozilla Thunderbird</p> <p>Regular expressions used to filter out forbidden properties and values from style directives in calls to `console.log` weren&#39;t accounting for external URLs. Data could then be potentially exfiltrated from the browser. This vulnerability affects Firefox &lt; 109, Firefox ESR &lt; 102.7, and Thunderbird &lt; 102.7.</p> https://cve.radiocsirt.org/vuln/cve-2023-23603