Lucene search

K
cvelistChromeCVELIST:CVE-2016-5134
HistoryJul 23, 2016 - 7:00 p.m.

CVE-2016-5134

2016-07-2319:00:00
Chrome
raw.githubusercontent.com
2

5.8 Medium

AI Score

Confidence

Low

0.017 Low

EPSS

Percentile

87.6%

net/proxy/proxy_service.cc in the Proxy Auto-Config (PAC) feature in Google Chrome before 52.0.2743.82 does not ensure that URL information is restricted to a scheme, host, and port, which allows remote attackers to discover credentials by operating a server with a PAC script, a related issue to CVE-2016-3763.