Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Inappropriate use of www mismatch redirects in browser navigation in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, allowed a remote attacker to potentially downgrade HTTPS requests to HTTP via a crafted HTML page. In other words, Chrome could transmit cleartext even though the user had entered an https URL, because of a misdesigned workaround for cases where the domain name in a URL almost matches the domain name in an X.509 server certificate (but differs in the initial "www." substring).
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Google Chrome 安全漏洞
Vulnerability Description
Google Chrome是美国谷歌(Google)公司的一款Web浏览器。 Google Chrome 基于Mac、Windows和Linux平台的61.0.3163.79之前的版本和基于Android平台的Google Chrome 61.0.3163.81之前的版本中存在安全漏洞。远程攻击者可借助特制的HTML页面利用该漏洞将HTTPS请求降级成HTTP。
CVSS Information
N/A
Vulnerability Type
N/A