{
  "cveId": "CVE-2019-11737",
  "url": "https://patchblox.com/security/cve/CVE-2019-11737",
  "summary": "CVE-2019-11737 is fixed in 4 products on 2 platforms, first by firefox 69.0\u002Bbuild2-0ubuntu0.18.04.1, released September 3, 2019. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "Firefox ESR: If a wildcard (\u0027*\u0027) is specified for the host in Content Security Policy (CSP) directives, any port or\u2026",
  "description": "If a wildcard (\u0027*\u0027) is specified for the host in Content Security Policy (CSP) directives, any port or path restriction of the directive will be ignored, leading to CSP directives not being properly applied to content. This vulnerability affects Firefox \u003C 69.",
  "published": "2019-09-03T17:00:00Z",
  "severity": "Low",
  "cvss": 5.3,
  "epss": 0.00546,
  "epssPercentile": 0.46002,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "vendorAdvisory": "https://nvd.nist.gov/vuln/detail/CVE-2019-11737",
  "fixes": [
    {
      "platform": "windows-app",
      "product": "Mozilla Firefox ESR (en-US)",
      "fixedVersion": "78.0esr",
      "fix": "Mozilla Firefox ESR (en-US) 78.0esr",
      "url": "https://patchblox.com/security/fix/windows-app/mozilla.firefox.esr-78.0esr",
      "released": "2020-06-25T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "69.0\u002Bbuild2-0ubuntu0.18.04.1",
      "fix": "firefox 69.0\u002Bbuild2-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-firefox-69.0-build2-0ubuntu0.18.04.1",
      "released": "2019-09-03T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox-geckodriver",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "69.0\u002Bbuild2-0ubuntu0.18.04.1",
      "fix": "firefox-geckodriver 69.0\u002Bbuild2-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-firefox-geckodriver-69.0-build2-0ubuntu0.18.04.1",
      "released": "2019-09-03T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox-mozsymbols",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "69.0\u002Bbuild2-0ubuntu0.18.04.1",
      "fix": "firefox-mozsymbols 69.0\u002Bbuild2-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-firefox-mozsymbols-69.0-build2-0ubuntu0.18.04.1",
      "released": "2019-09-03T17:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T00:53:09Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}