3 matches found
Google Chrome Information Disclosure Vulnerability (CNVD-2019-03548)
Google Chrome is a web browser developed by the American company Google Google. A security vulnerability exists in Google Chrome prior to version 66.0.3359.117, which originates in the File API, where the 'readAsText' function reads a user-selected file multiple times. The vulnerability can be...
CVE-2018-6109
readAsText can indefinitely read the file picked by the user, rather than only once at the time the file is picked in File API in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to access data on the user file system without explicit consent via a crafted HTML page...
CVE-2018-6109
readAsText can indefinitely read the file picked by the user, rather than only once at the time the file is picked in File API in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to access data on the user file system without explicit consent via a crafted HTML page...