GHSA-4rf5-qf66-5m85
GitHub Security Advisory
⚠ Unreviewed
MODERATE
Has CVE
Advisory Details
Bookmark handling in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android had insufficient validation of supplied data, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via crafted HTML pages, as demonstrated by an interpretation conflict between userinfo and scheme in an http://javascript:[email protected] URL.
Related CVEs
Key Information
5.0
/10
Dataset
Last updated: August 3, 2025 6:48 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.