Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2017-5069

Опубликовано: 19 апр. 2017
Источник: redhat
CVSS3: 4.2
EPSS Низкий

Описание

Incorrect MIME type of XSS-Protection reports in Blink in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac, and 58.0.3029.83 for Android, allowed a remote attacker to circumvent Cross-Origin Resource Sharing checks via a crafted HTML page.

Дополнительная информация

Статус:

Low
https://bugzilla.redhat.com/show_bug.cgi?id=1443850chromium-browser: cross-origin bypass in blink

EPSS

Процентиль: 65%
0.00492
Низкий

4.2 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.1
ubuntu
больше 8 лет назад

Incorrect MIME type of XSS-Protection reports in Blink in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac, and 58.0.3029.83 for Android, allowed a remote attacker to circumvent Cross-Origin Resource Sharing checks via a crafted HTML page.

CVSS3: 6.1
nvd
больше 8 лет назад

Incorrect MIME type of XSS-Protection reports in Blink in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac, and 58.0.3029.83 for Android, allowed a remote attacker to circumvent Cross-Origin Resource Sharing checks via a crafted HTML page.

CVSS3: 6.1
debian
больше 8 лет назад

Incorrect MIME type of XSS-Protection reports in Blink in Google Chrom ...

CVSS3: 6.1
github
больше 3 лет назад

Incorrect MIME type of XSS-Protection reports in Blink in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac, and 58.0.3029.83 for Android, allowed a remote attacker to circumvent Cross-Origin Resource Sharing checks via a crafted HTML page.

CVSS3: 4.3
fstec
больше 8 лет назад

Уязвимость модуля отображения Blink браузера Google Chrome, позволяющая нарушителю обойти проверки Cross-Origin Resource Sharing

EPSS

Процентиль: 65%
0.00492
Низкий

4.2 Medium

CVSS3