PT-2020-13300

Name of the Vulnerable Software and Affected Versions SecZetta NEProfile version 3.3.11 Description A Host header injection issue has been found, allowing authenticated remote adversaries to manipulate the Host header, which can result in controlling the execution flow for the 302 HTTP status...

Session fixation

The OneClickSigninHelper::ShowInfoBarIfPossible function in browser/ui/sync/oneclicksigninhelper.cc in Google Chrome before 31.0.1650.63 uses an incorrect URL during realm validation, which allows remote attackers to conduct session fixation attacks and hijack web sessions by triggering improper...