Security Advisory

CVE-2015-1261

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2015-05-20 10:00:00

Last updated 2024-08-06 04:40:17

Assigner Chrome

CVSS score not scored

State PUBLISHED

Description

android/java/src/org/chromium/chrome/browser/WebsiteSettingsPopup.java in Google Chrome before 43.0.2357.65 on Android does not properly restrict use of a URL's fragment identifier during construction of a page-info popup, which allows remote attackers to spoof the URL bar or deliver misleading popup content via crafted text.

← Browse all CVEs View on cve.org ↗