exploitDog

GHSA-6w5v-57r2-8gjp

Опубликовано: 13 мая 2022

Источник: github

Github: Не прошло ревью

Описание

Google Chrome before 14.0.835.202 does not properly restrict access to the window prototype, which allows remote attackers to bypass the Same Origin Policy via unspecified vectors.

Google Chrome before 14.0.835.202 does not properly restrict access to the window prototype, which allows remote attackers to bypass the Same Origin Policy via unspecified vectors.

Ссылки

https://nvd.nist.gov/vuln/detail/CVE-2011-2878
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14470
http://code.google.com/p/chromium/issues/detail?id=95671
http://googlechromereleases.blogspot.com/2011/10/stable-channel-update.html

EPSS

Процентиль: 60%

0.01019

Низкий

CVE ID

Связанные уязвимости

CVE-2011-2878

ubuntu

почти 15 лет назад

Google Chrome before 14.0.835.202 does not properly restrict access to the window prototype, which allows remote attackers to bypass the Same Origin Policy via unspecified vectors.

CVE-2011-2878

nvd

почти 15 лет назад

Google Chrome before 14.0.835.202 does not properly restrict access to the window prototype, which allows remote attackers to bypass the Same Origin Policy via unspecified vectors.

CVE-2011-2878

debian

почти 15 лет назад

Google Chrome before 14.0.835.202 does not properly restrict access to ...

EPSS

Процентиль: 60%

0.01019

Низкий

CVE ID