2 matches found
Google Chrome CSPSource::schemeMatches Information Disclosure Vulnerability
Google Chrome is a web browsing tool developed by Google. In the CSP implementation of Blink in versions of Google Chrome prior to 52.0.2743.82, the WebKit/Source/core/frame/csp/CSPSource.cpp/CSPSource::schemeMatches function does not apply the http :80 policy to the https : 443 URL, nor does it...
4.3CVSS8.8AI score0.01283EPSS
SaveExploits0References1
Vulnerability in Google Chrome Blink Content Security Policy
Google Chrome is a web browser. Google V8 is one of the open source JavaScript engines. Google Chrome uses Blink's Content Security Policy CSP implementation process of WebKit/Source/core/frame/csp/CSPSource.cpp file in the 'CSPSource::. SchemeMatches function in the...
4.3CVSS6.8AI score0.01271EPSS
SaveExploits0References1
20