Microsoft Edge mishandles HTML attributes in HTTP responses, which allows remote attackers to bypass a cross-site scripting (XSS) protection mechanism via unspecified vectors, aka "Microsoft Edge XSS Filter Bypass Vulnerability."
References
Configurations
History
21 Nov 2024, 02:34
Type | Values Removed | Values Added |
---|---|---|
References | () http://www.securitytracker.com/id/1034316 - | |
References | () https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-125 - |
Information
Published : 2015-12-09 11:59
Updated : 2025-04-12 10:46
NVD link : CVE-2015-6176
Mitre link : CVE-2015-6176
CVE.ORG link : CVE-2015-6176
JSON object : View
Products Affected
microsoft
- edge
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')