Loading HuntDB...
Hunt
Vulnerability Intelligence by wss.sh
Home Daily Briefings High Impact CVEs Recent Exploits KEV Catalog GitHub Advisories Latest Updates Security News
Sign In Sign Up

CVE-2016-5191

UNKNOWN
Published 2016-12-18T03:34:00
Actions:

Expert Analysis

Professional remediation guidance

Get tailored security recommendations from our analyst team for CVE-2016-5191. We'll provide specific mitigation strategies based on your environment and risk profile.

No CVSS data available

Description

Bookmark handling in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android had insufficient validation of supplied data, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via crafted HTML pages, as demonstrated by an interpretation conflict between userinfo and scheme in an http://javascript:[email protected] URL.

Available Exploits

No exploits available for this CVE.

Related News

No news articles found for this CVE.

GitHub Security Advisories

Community-driven vulnerability intelligence from GitHub

⚠ Unreviewed MODERATE

GHSA-4rf5-qf66-5m85

Advisory Details

Bookmark handling in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android had insufficient validation of supplied data, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via crafted HTML pages, as demonstrated by an interpretation conflict between userinfo and scheme in an http://javascript:[email protected] URL.

CVSS Scoring

CVSS Score

5.0

CVSS Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

References

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2016-5191
WEB https://chromereleases.googleblog.com/2016/10/stable-channel-update-for-desktop.html
WEB https://codereview.chromium.org/2411473002
WEB https://crbug.com/639126
WEB https://security.gentoo.org/glsa/201610-09
WEB http://rhn.redhat.com/errata/RHSA-2016-2067.html
WEB http://www.securityfocus.com/bid/93528

Advisory provided by GitHub Security Advisory Database. Published: May 14, 2022, Modified: May 14, 2022

References

https://codereview.chromium.org/2411473002
http://www.securityfocus.com/bid/93528
https://crbug.com/639126
http://rhn.redhat.com/errata/RHSA-2016-2067.html
https://security.gentoo.org/glsa/201610-09
https://chromereleases.googleblog.com/2016/10/stable-channel-update-for-desktop.html
Published: 2016-12-18T03:34:00
Last Modified: 2024-08-06T00:53:48.461Z
Copied to clipboard!