PT-2014-3155
CVE-2013-6656
·
تاريخ النشر
2014-02-20
·
تاريخ التحديث
2024-06-15
الوصف من
CVSS 2.0
5.0
متوسطةالمقاييسAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 33.0.1750.117
Description
The issue is related to the XSSAuditor::init function in the XSS auditor component of Blink, which improperly processes POST requests. This is done by using the body of a redirecting page instead of the body of a redirect target, allowing remote attackers to obtain sensitive information.
Recommendations
For versions prior to 33.0.1750.117, update to version 33.0.1750.117 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾