Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2018-18352

Опубликовано: 04 дек. 2018
Источник: redhat
CVSS3: 6.5

Описание

Service works could inappropriately gain access to cross origin audio in Media in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to bypass same origin policy for audio content via a crafted HTML page.

Дополнительная информация

Статус:

Moderate
https://bugzilla.redhat.com/show_bug.cgi?id=1656566chromium-browser: Inappropriate implementation in Media

6.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.5
ubuntu
около 7 лет назад

Service works could inappropriately gain access to cross origin audio in Media in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to bypass same origin policy for audio content via a crafted HTML page.

CVSS3: 6.5
nvd
около 7 лет назад

Service works could inappropriately gain access to cross origin audio in Media in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to bypass same origin policy for audio content via a crafted HTML page.

CVSS3: 6.5
debian
около 7 лет назад

Service works could inappropriately gain access to cross origin audio ...

CVSS3: 6.5
github
больше 3 лет назад

Service works could inappropriately gain access to cross origin audio in Media in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to bypass same origin policy for audio content via a crafted HTML page.

CVSS3: 6.5
fstec
около 7 лет назад

Уязвимость браузера Google Chrome, связанная с ошибками разграничения доступа, позволяющая нарушителю обойти существующие ограничения политики CORS

6.5 Medium

CVSS3