Remote Yes

Type Access restriction bypass

Description

An attacker could have injected CSS into stylesheets accessible via internal URIs, such as resource:, and in doing so bypass a page's Content Security Policy.

AVG-2760 firefox 100.0.2-1 101.0-1 High Fixed

https://bugzilla.mozilla.org/show_bug.cgi?id=1757604