CVE-2023-23602

Published: 2023-06-02T17:15Z

Last Modified: 2025-01-10T19:15Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

A mishandled security check when creating a WebSocket in a WebWorker caused the Content Security Policy connect-src header to be ignored. This could lead to connections to restricted origins from inside WebWorkers. This vulnerability affects Firefox < 109, Thunderbird < 102.7, and Firefox ESR < 102.7. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt