CVE-2024-0310

Summary

CVE-2024-0310 is a content-security-policy vulnerability affecting the ENS Control browser extension before version 10.7.0 Update 15. The issue enables a remote attacker to manipulate response header parameters, resulting in the content security policy switching to report-only mode. This bypasses the intended security configuration, potentially exposing users to various cyber threats.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.