Security Advisory

CVE-2014-1485

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2014-02-06 02:00:00

Last updated 2024-08-06 09:42:35

Assigner mozilla

CVSS score not scored

State PUBLISHED

Description

The Content Security Policy (CSP) implementation in Mozilla Firefox before 27.0 and SeaMonkey before 2.24 operates on XSLT stylesheets according to style-src directives instead of script-src directives, which might allow remote attackers to execute arbitrary XSLT code by leveraging insufficient style-src restrictions.

← Browse all CVEs View on cve.org ↗