PT-2014-3155
CVE-2013-6656
·
Published
2014-02-20
·
Updated
2024-06-15
Description by
CVSS 2.0
5.0
MediumMetricsAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 33.0.1750.117
Description
The issue is related to the XSSAuditor::init function in the XSS auditor component of Blink, which improperly processes POST requests. This is done by using the body of a redirecting page instead of the body of a redirect target, allowing remote attackers to obtain sensitive information.
Recommendations
For versions prior to 33.0.1750.117, update to version 33.0.1750.117 or later to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾