chromium -- multiple vulnerabilitiesentered 2015-12-02
no CVE referenced
CVE details
CVE-2015-6784
The page serializer in Google Chrome before 47.0.2526.73 mishandles Mark of the Web (MOTW) comments for URLs containing a "--" sequence, which might allow remote attackers to inject HTML via a crafted URL, as demonstrated by an initial http://example.com?-- substring.
- Score
- 4.3 medium
- Published
- 2015-12-06
- Links
- NVD · cve.org · Report wrong data
Matched ports (0)
No port is within the affected range.