https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 23:18:10 +0000 https://cve.radiocsirt.org/vuln/cve-2018-5175 <p><strong>Affected:</strong> Mozilla Firefox</p> <p>A mechanism to bypass Content Security Policy (CSP) protections on sites that have a &#34;script-src&#34; policy of &#34;&#39;strict-dynamic&#39;&#34;. If a target website contains an HTML injection flaw an attacker could inject a reference to a copy of the &#34;require.js&#34; library that is part of Firefox&#39;s Developer Tools, and then use a known technique using that library to bypass the CSP restrictions on executing injected scripts. This vulnerability affects Firefox &lt; 60.</p> <p><strong>Affected:</strong> Mozilla Firefox</p> <p>A mechanism to bypass Content Security Policy (CSP) protections on sites that have a &#34;script-src&#34; policy of &#34;&#39;strict-dynamic&#39;&#34;. If a target website contains an HTML injection flaw an attacker could inject a reference to a copy of the &#34;require.js&#34; library that is part of Firefox&#39;s Developer Tools, and then use a known technique using that library to bypass the CSP restrictions on executing injected scripts. This vulnerability affects Firefox &lt; 60.</p> https://cve.radiocsirt.org/vuln/cve-2018-5175