Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2013-6657
HistoryFeb 24, 2014 - 4:48 a.m.

CVE-2013-6657

2014-02-2404:48:00
Debian Security Bug Tracker
security-tracker.debian.org
10

0.002 Low

EPSS

Percentile

62.3%

core/html/parser/XSSAuditor.cpp in the XSS auditor in Blink, as used in Google Chrome before 33.0.1750.117, inserts the about:blank URL during certain blocking of FORM elements within HTTP requests, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via unspecified vectors.

OSVersionArchitecturePackageVersionFilename
Debian9allchromium-browser< 70.0.3538.110-1~deb9u1chromium-browser_70.0.3538.110-1~deb9u1_all.deb