QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2016-5144

Back to search

CVE-2016-5144

Published: Aug 7, 2016

Modified: Aug 6, 2024

PUBLISHED

Description

The Developer Tools (aka DevTools) subsystem in Blink, as used in Google Chrome before 52.0.2743.116, mishandles the script-path hostname, remoteBase parameter, and remoteFrontendUrl parameter, which allows remote attackers to bypass intended access restrictions via a crafted URL, a different vulnerability than CVE-2016-5143.

VendorProductVersions

n/a

n/a

affected
n/a

References

92276
vdb-entry
x_refsource_BID
https://crbug.com/618333
x_refsource_CONFIRM
openSUSE-SU-2016:1983
vendor-advisory
x_refsource_SUSE
RHSA-2016:1580
vendor-advisory
x_refsource_REDHAT
1036547
vdb-entry
x_refsource_SECTRACK
GLSA-201610-09
vendor-advisory
x_refsource_GENTOO
openSUSE-SU-2016:1982
vendor-advisory
x_refsource_SUSE
DSA-3645
vendor-advisory
x_refsource_DEBIAN
FEDORA-2016-e9798eaaa3
vendor-advisory
x_refsource_FEDORA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now