CVE-2024-0747

CVE Information
CVE ID
CVE-2024-0747
Severity
MEDIUM CVSS 6.5
Publish Date
2024-01-23
Description

When a parent page loaded a child in an iframe with `unsafe-inline`, the parent Content Security Policy could have overridden the child Content Security Policy. This vulnerability affects Firefox < 122, Firefox ESR < 115.7, and Thunderbird < 115.7.

Collection Date
2026-01-13
Impact Summary
Affected Hosts 1
Related Incidents 0
Related Alerts 0
Affected Hosts (1)
Hostname OS Type Severity Total CVEs
inbridge-ubt-24 LINUX CRITICAL 2364