Code injection

android/java/src/org/chromium/chrome/browser/WebsiteSettingsPopup.java in Google Chrome before 43.0.2357.65 on Android does not properly restrict use of a URL's fragment identifier during construction of a page-info popup, which allows remote attackers to spoof the URL bar or deliver misleading...

CVE-2015-1261

android/java/src/org/chromium/chrome/browser/WebsiteSettingsPopup.java in Google Chrome before 43.0.2357.65 on Android does not properly restrict use of a URL's fragment identifier during construction of a page-info popup, which allows remote attackers to spoof the URL bar or deliver misleading...

CVE-2015-1261

CVE-2015-1261 is tied to Google Chrome before 43.0.2357.65 across desktop and Android platforms, where the browser failed to properly restrict a URL fragment during the construction of a page-info popup. This allowed remote attackers to spoof the URL bar or deliver misleading popup content via cr...