Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 22:29:09 +0000 CVE-2023-23602 — Content Security Policy wasn't being correctly applied to WebSockets in WebWorkers https://vulnerability.circl.lu/vuln/cve-2023-23602 <p><strong>Affected:</strong> Mozilla Firefox, Mozilla Firefox ESR, Mozilla Thunderbird</p> <p>A mishandled security check when creating a WebSocket in a WebWorker caused the Content Security Policy connect-src header to be ignored. This could lead to connections to restricted origins from inside WebWorkers. This vulnerability affects Firefox &lt; 109, Firefox ESR &lt; 102.7, and Thunderbird &lt; 102.7.</p> <p><strong>Affected:</strong> Mozilla Firefox, Mozilla Firefox ESR, Mozilla Thunderbird</p> <p>A mishandled security check when creating a WebSocket in a WebWorker caused the Content Security Policy connect-src header to be ignored. This could lead to connections to restricted origins from inside WebWorkers. This vulnerability affects Firefox &lt; 109, Firefox ESR &lt; 102.7, and Thunderbird &lt; 102.7.</p> https://vulnerability.circl.lu/vuln/cve-2023-23602