PT-2014-3156
CVE-2013-6657
·
Publicado
2014-02-20
·
Atualizado
2024-06-15
Descrição por
CVSS 2.0
6.4
MédiaMétricasAV:N/AC:L/Au:N/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 33.0.1750.117
Description
The issue allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via unspecified vectors. This is due to the XSS auditor in Blink inserting the about:blank URL during certain blocking of FORM elements within HTTP requests.
Recommendations
For versions prior to 33.0.1750.117, update to version 33.0.1750.117 or later to resolve the issue.
Explorabilidade
Exploit
Correção
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾