PT-2014-3156
CVE-2013-6657
·
Published
2014-02-20
·
Updated
2024-06-15
Description by
CVSS 2.0
6.4
MediumMetricsAV:N/AC:L/Au:N/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 33.0.1750.117
Description
The issue allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via unspecified vectors. This is due to the XSS auditor in Blink inserting the about:blank URL during certain blocking of FORM elements within HTTP requests.
Recommendations
For versions prior to 33.0.1750.117, update to version 33.0.1750.117 or later to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾