Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2010-1767
HistorySep 24, 2010 - 7:00 p.m.

CVE-2010-1767

2010-09-2419:00:00
Debian Security Bug Tracker
security-tracker.debian.org
16

EPSS

0.004

Percentile

73.0%

Cross-site request forgery (CSRF) vulnerability in loader/DocumentThreadableLoader.cpp in WebCore in WebKit before r57041, as used in Google Chrome before 4.1.249.1059, allows remote attackers to hijack the authentication of unspecified victims via a crafted synchronous preflight XMLHttpRequest operation.

OSVersionArchitecturePackageVersionFilename
Debian9allchromium-browser< 70.0.3538.110-1~deb9u1chromium-browser_70.0.3538.110-1~deb9u1_all.deb

EPSS

0.004

Percentile

73.0%