Midori-browser Midori 0.5.11

CPE Details

Midori-browser Midori 0.5.11
midori-browser
midori
0.5.11
2020-01-17
20h18 +00:00
2020-01-17
20h18 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:midori-browser:midori:0.5.11:*:*:*:*:*:*:*

Informations

Vendor

midori-browser

Product

midori

Version

0.5.11

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2019-19916 2019-12-20 14h07 +00:00 In Midori Browser 0.5.11 (on Windows 10), Content Security Policy (CSP) is not applied correctly to all parts of multipart content sent with the multipart/x-mixed-replace MIME type. This could result in script running where CSP should have blocked it, allowing for cross-site scripting (XSS) and other attacks when the product renders the content as HTML. Remediating this would also need to consider the polyglot case, e.g., a file that is a valid GIF image and also valid JavaScript.
6.1
Medium