Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:28468
HistoryDec 06, 2020 - 4:44 a.m.

Improper Input Validation

2020-12-0604:44:23
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
16
chromium improper validation lax cookies samesite bypass crafted html google chrome.

EPSS

0.008

Percentile

81.8%

chromium is vulnerable to improper input validation. The vulnerability exists due to lack of validation of ancestor frames site when sending lax cookies in navigation in Google Chrome, allowing a malicious user to bypass SameSite cookie policy via a crafted HTML page.