If an XML file is served with a Content Security Policy and the XML file includes an XSL stylesheet, the Content Security Policy will not be applied to the contents of the XSL stylesheet. If the XSL sheet e.g. includes JavaScript, it would bypass any of the restrictions of the Content Security Policy applied to the XML document. This vulnerability affects Firefox < 72.
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "firefox-locale-de": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-nl": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-kn": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-gl": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-fy": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-eo": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-km": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-or": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-az": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-lt": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-hy": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-kk": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-sv": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-uk": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-sr": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-ca": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-is": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-dbg": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-ne": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-ga": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-it": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-ja": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-lg": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-ms": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-dev": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-ia": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-ko": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-hr": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-mai": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-nb": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-mozsymbols": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-vi": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-zh-hans": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-he": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-sw": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-el": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-oc": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-xh": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-nn": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-geckodriver": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-csb": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-cs": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-gn": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-hsb": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-ar": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-my": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-ro": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-zu": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-nso": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-af": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-sk": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-si": "72.0.1+build1-0ubuntu0.16.04.1", "firefox": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-cy": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-dbgsym": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-cak": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-sq": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-en": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-tr": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-br": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-et": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-ast": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-th": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-da": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-fi": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-ku": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-fa": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-mn": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-geckodriver-dbgsym": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-ru": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-mk": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-bg": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-hu": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-gu": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-bn": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-kab": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-ml": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-an": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-be": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-eu": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-fr": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-pa": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-as": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-id": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-mr": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-bs": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-te": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-lv": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-ka": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-ta": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-gd": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-zh-hant": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-uz": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-hi": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-es": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-sl": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-pl": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-pt": "72.0.1+build1-0ubuntu0.16.04.1", "firefox-locale-ur": "72.0.1+build1-0ubuntu0.16.04.1" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "firefox-locale-de": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-nl": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-kn": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-gl": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-fy": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-eo": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-km": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-or": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-az": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-lt": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-hy": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-kk": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-sv": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-uk": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-sr": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-ca": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-is": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-dbg": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-ne": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-ga": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-it": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-ja": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-lg": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-ms": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-dev": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-ia": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-ko": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-hr": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-mai": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-nb": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-mozsymbols": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-vi": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-zh-hans": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-he": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-sw": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-el": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-oc": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-xh": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-nn": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-csb": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-geckodriver": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-cs": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-gn": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-hsb": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-zu": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-my": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-ro": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-ar": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-nso": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-af": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-sk": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-si": "72.0.1+build1-0ubuntu0.18.04.1", "firefox": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-cy": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-fa": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-cak": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-sq": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-en": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-tr": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-br": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-et": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-ast": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-th": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-da": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-fi": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-ku": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-mn": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-ru": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-mk": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-bg": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-hu": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-gu": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-bn": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-kab": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-ml": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-an": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-be": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-eu": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-fr": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-pa": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-as": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-ta": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-mr": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-gd": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-te": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-lv": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-ka": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-id": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-bs": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-zh-hant": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-uz": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-hi": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-es": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-sl": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-pl": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-pt": "72.0.1+build1-0ubuntu0.18.04.1", "firefox-locale-ur": "72.0.1+build1-0ubuntu0.18.04.1" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "firefox-locale-de": "72.0.1+build1-0ubuntu1", "firefox-locale-nl": "72.0.1+build1-0ubuntu1", "firefox-locale-kn": "72.0.1+build1-0ubuntu1", "firefox-locale-gl": "72.0.1+build1-0ubuntu1", "firefox-locale-fy": "72.0.1+build1-0ubuntu1", "firefox-locale-eo": "72.0.1+build1-0ubuntu1", "firefox-locale-km": "72.0.1+build1-0ubuntu1", "firefox-locale-or": "72.0.1+build1-0ubuntu1", "firefox-locale-az": "72.0.1+build1-0ubuntu1", "firefox-locale-lt": "72.0.1+build1-0ubuntu1", "firefox-locale-hy": "72.0.1+build1-0ubuntu1", "firefox-locale-kk": "72.0.1+build1-0ubuntu1", "firefox-locale-sv": "72.0.1+build1-0ubuntu1", "firefox-locale-uk": "72.0.1+build1-0ubuntu1", "firefox-locale-sr": "72.0.1+build1-0ubuntu1", "firefox-locale-ca": "72.0.1+build1-0ubuntu1", "firefox-locale-is": "72.0.1+build1-0ubuntu1", "firefox-dbg": "72.0.1+build1-0ubuntu1", "firefox-locale-ne": "72.0.1+build1-0ubuntu1", "firefox-locale-ga": "72.0.1+build1-0ubuntu1", "firefox-locale-it": "72.0.1+build1-0ubuntu1", "firefox-locale-ja": "72.0.1+build1-0ubuntu1", "firefox-locale-lg": "72.0.1+build1-0ubuntu1", "firefox-locale-ms": "72.0.1+build1-0ubuntu1", "firefox-dev": "72.0.1+build1-0ubuntu1", "firefox-locale-ia": "72.0.1+build1-0ubuntu1", "firefox-locale-ko": "72.0.1+build1-0ubuntu1", "firefox-locale-hr": "72.0.1+build1-0ubuntu1", "firefox-locale-mai": "72.0.1+build1-0ubuntu1", "firefox-locale-nb": "72.0.1+build1-0ubuntu1", "firefox-mozsymbols": "72.0.1+build1-0ubuntu1", "firefox-locale-vi": "72.0.1+build1-0ubuntu1", "firefox-locale-zh-hans": "72.0.1+build1-0ubuntu1", "firefox-locale-he": "72.0.1+build1-0ubuntu1", "firefox-locale-sw": "72.0.1+build1-0ubuntu1", "firefox-locale-el": "72.0.1+build1-0ubuntu1", "firefox-locale-oc": "72.0.1+build1-0ubuntu1", "firefox-locale-xh": "72.0.1+build1-0ubuntu1", "firefox-locale-nn": "72.0.1+build1-0ubuntu1", "firefox-locale-csb": "72.0.1+build1-0ubuntu1", "firefox-geckodriver": "72.0.1+build1-0ubuntu1", "firefox-locale-cs": "72.0.1+build1-0ubuntu1", "firefox-locale-gn": "72.0.1+build1-0ubuntu1", "firefox-locale-hsb": "72.0.1+build1-0ubuntu1", "firefox-locale-zu": "72.0.1+build1-0ubuntu1", "firefox-locale-my": "72.0.1+build1-0ubuntu1", "firefox-locale-ro": "72.0.1+build1-0ubuntu1", "firefox-locale-ar": "72.0.1+build1-0ubuntu1", "firefox-locale-nso": "72.0.1+build1-0ubuntu1", "firefox-locale-af": "72.0.1+build1-0ubuntu1", "firefox-locale-sk": "72.0.1+build1-0ubuntu1", "firefox-locale-si": "72.0.1+build1-0ubuntu1", "firefox": "72.0.1+build1-0ubuntu1", "firefox-locale-cy": "72.0.1+build1-0ubuntu1", "firefox-locale-fa": "72.0.1+build1-0ubuntu1", "firefox-locale-cak": "72.0.1+build1-0ubuntu1", "firefox-locale-sq": "72.0.1+build1-0ubuntu1", "firefox-locale-en": "72.0.1+build1-0ubuntu1", "firefox-locale-tr": "72.0.1+build1-0ubuntu1", "firefox-locale-br": "72.0.1+build1-0ubuntu1", "firefox-locale-et": "72.0.1+build1-0ubuntu1", "firefox-locale-ast": "72.0.1+build1-0ubuntu1", "firefox-locale-th": "72.0.1+build1-0ubuntu1", "firefox-locale-da": "72.0.1+build1-0ubuntu1", "firefox-locale-fi": "72.0.1+build1-0ubuntu1", "firefox-locale-ku": "72.0.1+build1-0ubuntu1", "firefox-locale-mn": "72.0.1+build1-0ubuntu1", "firefox-locale-ru": "72.0.1+build1-0ubuntu1", "firefox-locale-mk": "72.0.1+build1-0ubuntu1", "firefox-locale-bg": "72.0.1+build1-0ubuntu1", "firefox-locale-hu": "72.0.1+build1-0ubuntu1", "firefox-locale-gu": "72.0.1+build1-0ubuntu1", "firefox-locale-bn": "72.0.1+build1-0ubuntu1", "firefox-locale-kab": "72.0.1+build1-0ubuntu1", "firefox-locale-ml": "72.0.1+build1-0ubuntu1", "firefox-locale-an": "72.0.1+build1-0ubuntu1", "firefox-locale-be": "72.0.1+build1-0ubuntu1", "firefox-locale-eu": "72.0.1+build1-0ubuntu1", "firefox-locale-fr": "72.0.1+build1-0ubuntu1", "firefox-locale-pa": "72.0.1+build1-0ubuntu1", "firefox-locale-as": "72.0.1+build1-0ubuntu1", "firefox-locale-ta": "72.0.1+build1-0ubuntu1", "firefox-locale-mr": "72.0.1+build1-0ubuntu1", "firefox-locale-gd": "72.0.1+build1-0ubuntu1", "firefox-locale-te": "72.0.1+build1-0ubuntu1", "firefox-locale-lv": "72.0.1+build1-0ubuntu1", "firefox-locale-ka": "72.0.1+build1-0ubuntu1", "firefox-locale-id": "72.0.1+build1-0ubuntu1", "firefox-locale-bs": "72.0.1+build1-0ubuntu1", "firefox-locale-zh-hant": "72.0.1+build1-0ubuntu1", "firefox-locale-uz": "72.0.1+build1-0ubuntu1", "firefox-locale-hi": "72.0.1+build1-0ubuntu1", "firefox-locale-es": "72.0.1+build1-0ubuntu1", "firefox-locale-sl": "72.0.1+build1-0ubuntu1", "firefox-locale-pl": "72.0.1+build1-0ubuntu1", "firefox-locale-pt": "72.0.1+build1-0ubuntu1", "firefox-locale-ur": "72.0.1+build1-0ubuntu1" } ] }