chromium -- multiple vulnerabilitiesentered 2016-05-28
no CVE referenced
CVE details
CVE-2016-1682
The ServiceWorkerContainer::registerServiceWorkerImpl function in WebKit/Source/modules/serviceworkers/ServiceWorkerContainer.cpp in Blink, as used in Google Chrome before 51.0.2704.63, allows remote attackers to bypass the Content Security Policy (CSP) protection mechanism via a ServiceWorker registration.
- Score
- 6.1 medium
- Published
- 2016-06-05
- Links
- NVD · cve.org · Report wrong data
Matched ports (0)
No port is within the affected range.