Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to properly enforce unsafe-inline content security policy, which allowed a remote attacker to bypass content security policy via a crafted HTML page.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: Chrome
Published: 2017-02-17T07:45:00
Updated: 2024-08-05T14:47:44.220Z
Reserved: 2017-01-02T00:00:00
Link: CVE-2017-5022
Vulnrichment
No data.
NVD
Status : Modified
Published: 2017-02-17T07:59:00.717
Modified: 2023-11-07T02:48:32.587
Link: CVE-2017-5022
Redhat