Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2016-5130

Опубликовано: 23 июл. 2016
Источник: nvd
CVSS3: 6.5
CVSS2: 4.3
EPSS Низкий

Описание

content/renderer/history_controller.cc in Google Chrome before 52.0.2743.82 does not properly restrict multiple uses of a JavaScript forward method, which allows remote attackers to spoof the URL display via a crafted web site.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
Версия до 51.0.2704.106 (включая)

EPSS

Процентиль: 65%
0.012
Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-284

Связанные уязвимости

CVSS3: 6.5
ubuntu
около 10 лет назад

content/renderer/history_controller.cc in Google Chrome before 52.0.2743.82 does not properly restrict multiple uses of a JavaScript forward method, which allows remote attackers to spoof the URL display via a crafted web site.

CVSS3: 8.8
redhat
около 10 лет назад

content/renderer/history_controller.cc in Google Chrome before 52.0.2743.82 does not properly restrict multiple uses of a JavaScript forward method, which allows remote attackers to spoof the URL display via a crafted web site.

CVSS3: 6.5
debian
около 10 лет назад

content/renderer/history_controller.cc in Google Chrome before 52.0.27 ...

CVSS3: 6.5
github
больше 4 лет назад

content/renderer/history_controller.cc in Google Chrome before 52.0.2743.82 does not properly restrict multiple uses of a JavaScript forward method, which allows remote attackers to spoof the URL display via a crafted web site.

EPSS

Процентиль: 65%
0.012
Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-284