chromium -- Incorrect handling of CSP headerentered 2018-06-10
no CVE referenced
CVE details
CVE-2018-6148
Incorrect implementation in Content Security Policy in Google Chrome prior to 67.0.3396.79 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.
- Score
- 6.5 medium
- Published
- 2019-06-27
- Links
- NVD · cve.org · Report wrong data
Matched ports (0)
No port is within the affected range.