CVE-2018-6148

Опубликовано: 06 июн. 2018

Источник: redhat

CVSS3: 8.8

Описание

Incorrect implementation in Content Security Policy in Google Chrome prior to 67.0.3396.79 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.

Ссылки на источники

Дополнительная информация

Статус:

Important

https://bugzilla.redhat.com/show_bug.cgi?id=1588379chromium-browser: Incorrect handling of CSP header

8.8 High

CVSS3

Связанные уязвимости

CVE-2018-6148

CVSS3: 6.5

ubuntu

больше 6 лет назад

Incorrect implementation in Content Security Policy in Google Chrome prior to 67.0.3396.79 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.

CVE-2018-6148

CVSS3: 6.5

nvd

больше 6 лет назад

Incorrect implementation in Content Security Policy in Google Chrome prior to 67.0.3396.79 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.

CVE-2018-6148

CVSS3: 6.5

debian

больше 6 лет назад

Incorrect implementation in Content Security Policy in Google Chrome p ...

openSUSE-SU-2018:1859-1

suse-cvrf

больше 7 лет назад

Security update for Opera

GHSA-j354-jr4f-q3j5

CVSS3: 6.5

github

больше 3 лет назад

Incorrect implementation in Content Security Policy in Google Chrome prior to 67.0.3396.79 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.

8.8 High

CVSS3