CVE-2015-1297

The WebRequest API implementation in extensions/browser/api/web_request/web_request_api.cc in Google Chrome before 45.0.2454.85 does not properly consider a…

published September 3, 2015

CVSS
—
EPSS
2%
Percentile
81.8
In the wild
Unconfirmed
What it is

The WebRequest API implementation in extensions/browser/api/web_request/web_request_api.cc in Google Chrome before 45.0.2454.85 does not properly consider a request's source before accepting the request, which allows remote attackers to bypass intended access restrictions via a crafted (1) app or (2) extension.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02140 · 81.8th percentile
Published
2015-09-03T22:00Z
EPSS history
Timeline
  • 03 SEP 22:00Z
    The WebRequest API implementation in extensions/browser/api/web_request/web_request_api.cc in Google Chrome before 45.0.2454.85 does not properly consider a…
    cvelistv5