---

CVE-2019-11737 - log back

CVE-2019-11737 created at 25 Sep 2019 19:31:40
Severity	+ Low
Remote	+ Remote
Type	+ Access restriction bypass
Description	+ In Firefox before 69.0, if a wildcard ('*') is specified for the host in Content Security Policy (CSP) directives, any port or path restriction of the directive will be ignored, leading to CSP directives not being properly applied to content.
References	+ https://www.mozilla.org/en-US/security/advisories/mfsa2019-25/#CVE-2019-11737 + https://bugzilla.mozilla.org/show_bug.cgi?id=1388015
Notes