CVE-2010-0315

CVE-2010-0315 affects WebKit (as used by Google Chrome prior to 4.0.249.89). The vulnerability arises from placing a site URL in a LINK element’s HREF and reading document.styleSheets[0].href, enabling a remote attacker to discover a redirect target for a specific user session (via an IFRAME-rela...