Security Advisory

CVE-2018-18358

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-12-11 15:00:00

Last updated 2024-08-05 11:08:21

Assigner Chrome

CVSS score not scored

State PUBLISHED

Description

Lack of special casing of localhost in WPAD files in Google Chrome prior to 71.0.3578.80 allowed an attacker on the local network segment to proxy resources on localhost via a crafted WPAD file.

← Browse all CVEs View on cve.org ↗