Lucene search

K
redhatcveRedhat.comRH:CVE-2018-6109
HistoryApr 18, 2018 - 9:23 a.m.

CVE-2018-6109

2018-04-1809:23:39
redhat.com
access.redhat.com
13

0.01 Low

EPSS

Percentile

84.0%

readAsText() can indefinitely read the file picked by the user, rather than only once at the time the file is picked in File API in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to access data on the user file system without explicit consent via a crafted HTML page.