PT-2014-3155

CVE-2013-6656

·

Published

2014-02-20

·

Updated

2024-06-15

Description by

CVSS 2.0
5.0
Medium
MetricsAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 33.0.1750.117
Description The issue is related to the XSSAuditor::init function in the XSS auditor component of Blink, which improperly processes POST requests. This is done by using the body of a redirecting page instead of the body of a redirect target, allowing remote attackers to obtain sensitive information.
Recommendations For versions prior to 33.0.1750.117, update to version 33.0.1750.117 or later to resolve the issue.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Related identifiers
ALT-PU-2014-1282
DSA-2883-1
MGASA-2014-0107
OPENSUSE-SU-2024:10171-1
OPENSUSE-SU-2024:12948-1
Found an issue in the description? Have something to add? Feel free to write us 👾