Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2011-4691

Опубликовано: 07 дек. 2011
Источник: nvd
CVSS2: 5
EPSS Низкий

Описание

Google Chrome 15.0.874.121 and earlier does not prevent capture of data about the times of Same Origin Policy violations during IFRAME loading attempts, which makes it easier for remote attackers to determine whether a document exists in the browser cache via crafted JavaScript code.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
Версия до 15.0.874.121 (включая)

EPSS

Процентиль: 46%
0.0023
Низкий

5 Medium

CVSS2

Дефекты

CWE-264

Связанные уязвимости

ubuntu
около 14 лет назад

Google Chrome 15.0.874.121 and earlier does not prevent capture of data about the times of Same Origin Policy violations during IFRAME loading attempts, which makes it easier for remote attackers to determine whether a document exists in the browser cache via crafted JavaScript code.

debian
около 14 лет назад

Google Chrome 15.0.874.121 and earlier does not prevent capture of dat ...

github
больше 3 лет назад

Google Chrome 15.0.874.121 and earlier does not prevent capture of data about the times of Same Origin Policy violations during IFRAME loading attempts, which makes it easier for remote attackers to determine whether a document exists in the browser cache via crafted JavaScript code.

EPSS

Процентиль: 46%
0.0023
Низкий

5 Medium

CVSS2

Дефекты

CWE-264