logo
DATABASE RESOURCES PRICING ABOUT US

CVE-2015-1254

Description

core/dom/Document.cpp in Blink, as used in Google Chrome before 43.0.2357.65, enables the inheritance of the designMode attribute, which allows remote attackers to bypass the Same Origin Policy by leveraging the availability of editing.


Affected Package


OS OS Version Package Name Package Version
Debian 9 chromium-browser 70.0.3538.110-1~deb9u1

Related