Name of the Vulnerable Software and Affected Versions Yelp (affected versions not specified)

Description Yelp incorrectly handled certain crafted help documents due to an overly permissive Content Security Policy (CSP), a security layer that helps detect and mitigate certain types of attacks, including Cross-Site Scripting (XSS) and data injection. An attacker could trick a user into opening a specially crafted document, which could lead to the disclosure of sensitive information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.