Description

The Permissions-Policy header allows developers to selectively enable and disable use of various browser features and APIs.

Remediation

References

Permissions-Policy / Feature-Policy (MDN)

Permissions Policy (W3C)

Related Vulnerabilities

Hadoop YARN ResourceManager publicly accessible

An Unsafe Content Security Policy (CSP) Directive in Use

Joomla! Core Security Bypass

Apache Tomcat version older than 6.0.36

Web Cache Poisoning

Severity

Info

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Configuration CWE-1021