CVE-2015-6790
14.12.2015, 11:59
The WebPageSerializerImpl::openTagToString function in WebKit/Source/web/WebPageSerializerImpl.cpp in the page serializer in Google Chrome before 47.0.2526.80 does not properly use HTML entities, which might allow remote attackers to inject arbitrary web script or HTML via a crafted document, as demonstrated by a double-quote character inside a single-quoted string.Enginsight
| Vendor | Product | Version |
|---|---|---|
| chrome | 𝑥 ≤ 47.0.2526.73 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Ubuntu Product | |||||||||
|---|---|---|---|---|---|---|---|---|---|
| chromium-browser |
| ||||||||
| oxide-qt |
|
Common Weakness Enumeration
References