Beveiligingsadvies
CVE-2017-5118
CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations
Beschrijving
Blink in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, failed to correctly propagate CSP restrictions to javascript scheme pages, which allowed a remote attacker to bypass content security policy via a crafted HTML page.