NetSight
IP …
medium6.5Public exploit code

CVE-2020-6519

Policy bypass in CSP in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to bypass content security policy via a crafted HTML page.

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Policy bypass in CSP in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to bypass content security policy via a crafted HTML page.

Affected products

VendorProductAffected versions
GoogleChrome
before 84.0.4147.89
OpensuseBackports Sle
Version 15.0
DebianDebian Linux
Version 10.0
FedoraprojectFedora
Versions 31, 32
OpensuseLeap
Versions 15.1, 15.2

References