CVE-2018-6066

Опубликовано: 06 мар. 2018

Источник: redhat

CVSS3: 6.5

EPSS Низкий

Описание

Lack of CORS checking by ResourceFetcher/ResourceLoader in Blink in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

Ссылки на источники

Дополнительная информация

Статус:

Moderate

https://bugzilla.redhat.com/show_bug.cgi?id=1552483chromium-browser: same origin bypass via canvas

EPSS

Процентиль: 85%

0.02796

Низкий

6.5 Medium

CVSS3

Связанные уязвимости

CVE-2018-6066

CVSS3: 6.5

ubuntu

почти 8 лет назад

Lack of CORS checking by ResourceFetcher/ResourceLoader in Blink in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

CVE-2018-6066

CVSS3: 6.5

nvd

почти 8 лет назад

Lack of CORS checking by ResourceFetcher/ResourceLoader in Blink in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

CVE-2018-6066

CVSS3: 6.5

debian

почти 8 лет назад

Lack of CORS checking by ResourceFetcher/ResourceLoader in Blink in Go ...

GHSA-mwj5-8xmw-4j7x

CVSS3: 6.5

github

больше 4 лет назад

Lack of CORS checking by ResourceFetcher/ResourceLoader in Blink in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

openSUSE-SU-2018:0704-1

suse-cvrf

больше 8 лет назад

Security update for Chromium

EPSS

Процентиль: 85%

0.02796

Низкий

6.5 Medium

CVSS3