The Developer Tools (aka DevTools) subsystem in Blink, as used in Google Chrome before 52.0.2743.116, mishandles the script-path hostname, remoteBase parameter, and remoteFrontendUrl parameter, which allows remote attackers to bypass intended access restrictions via a crafted URL, a different vulnerability than CVE-2016-5143.
References
Configurations
History
No history.
Information
Published : 2016-08-07 19:59
Updated : 2024-02-04 18:53
NVD link : CVE-2016-5144
Mitre link : CVE-2016-5144
CVE.ORG link : CVE-2016-5144
JSON object : View
Products Affected
- chrome
CWE
CWE-284
Improper Access Control