nvd-json-data-feeds/CVE-2024/CVE-2024-07xx/CVE-2024-0747.json

{
  "id": "CVE-2024-0747",
  "sourceIdentifier": "security@mozilla.org",
  "published": "2024-01-23T14:15:38.463",
  "lastModified": "2024-01-25T12:15:46.610",
  "vulnStatus": "Awaiting Analysis",
  "descriptions": [
    {
      "lang": "en",
      "value": "When a parent page loaded a child in an iframe with `unsafe-inline`, the parent Content Security Policy could have overridden the child Content Security Policy. This vulnerability affects Firefox < 122, Firefox ESR < 115.7, and Thunderbird < 115.7."
    },
    {
      "lang": "es",
      "value": "Cuando una p\u00e1gina principal cargaba una secundaria en un iframe con \"unsafe-inline\", la pol\u00edtica de seguridad de contenido principal podr\u00eda haber anulado la pol\u00edtica de seguridad de contenido secundaria. Esta vulnerabilidad afecta a Firefox &lt; 122, Firefox ESR &lt; 115.7 y Thunderbird &lt; 115.7."
    }
  ],
  "metrics": {},
  "references": [
    {
      "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1764343",
      "source": "security@mozilla.org"
    },
    {
      "url": "https://lists.debian.org/debian-lts-announce/2024/01/msg00015.html",
      "source": "security@mozilla.org"
    },
    {
      "url": "https://www.mozilla.org/security/advisories/mfsa2024-01/",
      "source": "security@mozilla.org"
    },
    {
      "url": "https://www.mozilla.org/security/advisories/mfsa2024-02/",
      "source": "security@mozilla.org"
    },
    {
      "url": "https://www.mozilla.org/security/advisories/mfsa2024-04/",
      "source": "security@mozilla.org"
    }
  ]
}