CVE-2018-9467 — In the getHost() function of UriTest.java, there is the possibility of incorrect web origin determination. This could lead to incorrect security decisions with no additional execution privileges neede — CVE Database · The Intelligence Room