CVE Vulnerabilities

CVE-2017-11872

Published: Nov 15, 2017 | Modified: Apr 20, 2025
CVSS 3.x
6.5
MEDIUM
Source:
NVD
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CVSS 2.x
4.3 MEDIUM
AV:N/AC:M/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to force the browser to send data that would otherwise be restricted to a destination website of the attackers choice, due to how Microsoft Edge handles redirect requests, aka Microsoft Edge Security Feature Bypass Vulnerability. This CVE ID is unique from CVE-2017-11863 and CVE-2017-11874.

Affected Software

NameVendorStart VersionEnd Version
EdgeMicrosoft**

References