NetSight
IP …
medium4.3

CVE-2020-6527

Insufficient policy enforcement in CSP in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to bypass content security policy via a crafted HTML pa…

Impact

Insufficient policy enforcement in CSP in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to bypass content security policy via a crafted HTML page.

Affected products

VendorProductAffected versions
GoogleChrome
before 84.0.4147.89
OpensuseBackports Sle
Version 15.0
DebianDebian Linux
Version 10.0
FedoraprojectFedora
Versions 31, 32
OpensuseLeap
Versions 15.1, 15.2

Weakness classification

CWE-276

References