Midori-browser Midori 0.5.11

CPE Details

Midori-browser Midori 0.5.11
midori-browser
midori
0.5.11
2020-01-17
20h18 +00:00
2020-01-17
20h18 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:midori-browser:midori:0.5.11:*:*:*:*:*:*:*

Informations

Vendor

midori-browser

Product

midori

Version

0.5.11

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2019-19916 2019-12-20 14h07 +00:00 In Midori Browser 0.5.11 (on Windows 10), Content Security Policy (CSP) is not applied correctly to all parts of multipart content sent with the multipart/x-mixed-replace MIME type. This could result in script running where CSP should have blocked it, allowing for cross-site scripting (XSS) and other attacks when the product renders the content as HTML. Remediating this would also need to consider the polyglot case, e.g., a file that is a valid GIF image and also valid JavaScript.
6.1
Moyen