ALPINE-CVE-2019-17020

See a problem?
Please try reporting it to the source first.
Source
https://security.alpinelinux.org/vuln/CVE-2019-17020
Import Source
https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2019-17020.json
JSON Data
https://api.osv.dev/v1/vulns/ALPINE-CVE-2019-17020
Upstream
  • CVE-2019-17020
Published
2020-01-08T22:15:12Z
Modified
2026-11-03T06:31:53Z
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N CVSS Calculator
Summary
[none]
Details

If an XML file is served with a Content Security Policy and the XML file includes an XSL stylesheet, the Content Security Policy will not be applied to the contents of the XSL stylesheet. If the XSL sheet e.g. includes JavaScript, it would bypass any of the restrictions of the Content Security Policy applied to the XML document. This vulnerability affects Firefox < 72.

References

Affected packages

Alpine:v3.12
firefox

Package

Name
firefox
Purl
pkg:apk/alpine/firefox?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
71.0.1-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2019-17020.json"
Alpine:v3.13
firefox

Package

Name
firefox
Purl
pkg:apk/alpine/firefox?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
71.0.1-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2019-17020.json"
Alpine:v3.14
firefox

Package

Name
firefox
Purl
pkg:apk/alpine/firefox?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
71.0.1-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2019-17020.json"
Alpine:v3.15
firefox

Package

Name
firefox
Purl
pkg:apk/alpine/firefox?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
71.0.1-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2019-17020.json"
Alpine:v3.16
firefox

Package

Name
firefox
Purl
pkg:apk/alpine/firefox?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
71.0.1-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2019-17020.json"
Alpine:v3.17
firefox

Package

Name
firefox
Purl
pkg:apk/alpine/firefox?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
71.0.1-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2019-17020.json"
Alpine:v3.18
firefox

Package

Name
firefox
Purl
pkg:apk/alpine/firefox?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
71.0.1-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2019-17020.json"
Alpine:v3.19
firefox

Package

Name
firefox
Purl
pkg:apk/alpine/firefox?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
71.0.1-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2019-17020.json"
Alpine:v3.20
firefox

Package

Name
firefox
Purl
pkg:apk/alpine/firefox?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
71.0.1-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2019-17020.json"
Alpine:v3.21
firefox

Package

Name
firefox
Purl
pkg:apk/alpine/firefox?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
71.0.1-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2019-17020.json"
librewolf

Package

Name
librewolf
Purl
pkg:apk/alpine/librewolf?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
71.0.1-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2019-17020.json"
Alpine:v3.22
firefox

Package

Name
firefox
Purl
pkg:apk/alpine/firefox?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
71.0.1-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2019-17020.json"
librewolf

Package

Name
librewolf
Purl
pkg:apk/alpine/librewolf?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
71.0.1-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2019-17020.json"
Alpine:v3.23
firefox

Package

Name
firefox
Purl
pkg:apk/alpine/firefox?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
71.0.1-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2019-17020.json"
librewolf

Package

Name
librewolf
Purl
pkg:apk/alpine/librewolf?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
71.0.1-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2019-17020.json"
Alpine:v3.24
librewolf

Package

Name
librewolf
Purl
pkg:apk/alpine/librewolf?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
71.0.1-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2019-17020.json"