Oval Definition:oval:com.ubuntu.disco:def:2019170010000000
Revision Date:2020-01-08Version:1
Title:CVE-2019-17001 on Ubuntu 19.04 (disco) - medium.
Description:A Content-Security-Policy that blocks in-line scripts could be bypassed using an object tag to execute JavaScript in the protected document (cross-site scripting). This is a separate bypass from CVE-2019-17000.*Note: This flaw only affected Firefox 69 and was not present in earlier versions.*. This vulnerability affects Firefox < 70.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2019-17001
Platform(s):Ubuntu 19.04
Product(s):
Definition Synopsis
  • Ubuntu 19.04 (disco) is installed.
  • AND Package Information
  • firefox package in disco was vulnerable but has been fixed (note: '70.0+build2-0ubuntu0.19.04.1').
  • OR mozjs52 package in disco is affected and may need fixing.
  • OR mozjs60 package in disco is affected and may need fixing.
  • BACK