Information disclosure in Google Chrome

CVE-2016-1617

The CSPSource::schemeMatches function in WebKit/Source/core/frame/csp/CSPSource.cpp in the Content Security Policy (CSP) implementation in Blink, as used in Google Chrome before 48.0.2564.82, does not apply http policies to https URLs and does not apply ws policies to wss URLs, which makes it easier for remote attackers to determine whether a specific HSTS web site has been visited by reading a CSP report.

Vulnerability class: Information Disclosure

EPSS: 0.013 (66.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.3 (Medium). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N.

Affected products

Weakness classification (CWE)

Public proof-of-concept exploits

References

Frequently asked questions

What is CVE-2016-1617?
CVE-2016-1617 is a medium-severity vulnerability in Google Chrome, classified under Information Disclosure. CVSS score: 4.3/10. Published 2016-01-25.
How severe is CVE-2016-1617?
Medium severity. CVSS v3 base score is 4.3 out of 10.
Is CVE-2016-1617 known to be exploited?
2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.