CVE-2020-6394: 
Google Chrome vulnerability analysis and mitigation

CVE-2020-6394 is a security vulnerability discovered in Google Chrome's Blink engine prior to version 80.0.3987.87, disclosed on February 4, 2020. The vulnerability allows a remote attacker to bypass content security policy through a crafted HTML page (Chrome Release).

The vulnerability is classified as a medium severity issue with a CVSS v3.1 base score of 5.4. The vulnerability stems from insufficient policy enforcement in the Blink rendering engine, which could allow attackers to bypass content security policy protections. The attack requires user interaction and can be exploited remotely (NVD).

If exploited, this vulnerability could allow attackers to bypass content security policy restrictions, potentially leading to unauthorized access to sensitive information or execution of malicious code within the security context of the affected browser (Red Hat).

The vulnerability was patched in Chrome version 80.0.3987.87. Users and administrators are advised to upgrade to this version or later to mitigate the risk. The fix has been backported to various Linux distributions including Debian, Fedora, and OpenSUSE (Debian, OpenSUSE).