Lucene search

K
prionPRIOn knowledge basePRION:CVE-2018-6109
HistoryJan 09, 2019 - 7:29 p.m.

Design/Logic Flaw

2019-01-0919:29:00
PRIOn knowledge base
www.prio-n.com
1

6.4 Medium

AI Score

Confidence

High

0.01 Low

EPSS

Percentile

84.0%

readAsText() can indefinitely read the file picked by the user, rather than only once at the time the file is picked in File API in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to access data on the user file system without explicit consent via a crafted HTML page.