Lucene search

K
cvelistMitreCVELIST:CVE-2013-6657
HistoryFeb 24, 2014 - 2:00 a.m.

CVE-2013-6657

2014-02-2402:00:00
mitre
www.cve.org
1

5.2 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

62.3%

core/html/parser/XSSAuditor.cpp in the XSS auditor in Blink, as used in Google Chrome before 33.0.1750.117, inserts the about:blank URL during certain blocking of FORM elements within HTTP requests, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via unspecified vectors.

5.2 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

62.3%