VULNERABILITY INTELLIGENCE

CVE-2015-1261

CVSS score5 MEDIUM
EPSS probability1.41%
CISA KEVNot currently listed
Published2015-05-20
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:N/I:P/A:N

Description

android/java/src/org/chromium/chrome/browser/WebsiteSettingsPopup.java in Google Chrome before 43.0.2357.65 on Android does not properly restrict use of a URL's fragment identifier during construction of a page-info popup, which allows remote attackers to spoof the URL bar or deliver misleading popup content via crafted text.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references