CVE-2019-17001 log

Source
Severity Medium
Remote Yes
Type Access restriction bypass
Description
A CSP bypass has been found in Firefox 69, where a Content-Security-Policy that blocks in-line scripts could be bypassed using an object tag to execute JavaScript in the protected document (cross-site scripting). This is a separate bypass from CVE-2019-17000.
Group Package Affected Fixed Severity Status Ticket
AVG-1055 firefox 69.0.3-1 70.0-1 Critical Fixed
Date Advisory Group Package Severity Description
26 Oct 2019 ASA-201910-16 AVG-1055 firefox Critical multiple issues
References
https://www.mozilla.org/en-US/security/advisories/mfsa2019-34/#CVE-2019-17001
https://bugzilla.mozilla.org/show_bug.cgi?id=1587976