CVE-2018-6075

Опубликовано: 06 мар. 2018

Источник: redhat

CVSS3: 6.5

Описание

Incorrect handling of specified filenames in file downloads in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to leak cross-origin data via a crafted HTML page and user interaction.

Ссылки на источники

Дополнительная информация

Статус:

Moderate

https://bugzilla.redhat.com/show_bug.cgi?id=1552492chromium-browser: overly permissive cross origin downloads

6.5 Medium

CVSS3

Связанные уязвимости

CVE-2018-6075

CVSS3: 6.5

ubuntu

около 7 лет назад

Incorrect handling of specified filenames in file downloads in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to leak cross-origin data via a crafted HTML page and user interaction.

CVE-2018-6075

CVSS3: 6.5

nvd

около 7 лет назад

Incorrect handling of specified filenames in file downloads in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to leak cross-origin data via a crafted HTML page and user interaction.

CVE-2018-6075

CVSS3: 6.5

debian

около 7 лет назад

Incorrect handling of specified filenames in file downloads in Google ...

GHSA-p5p7-ccwg-887m

CVSS3: 6.5

github

больше 3 лет назад

Incorrect handling of specified filenames in file downloads in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to leak cross-origin data via a crafted HTML page and user interaction.

openSUSE-SU-2018:0704-1

suse-cvrf

почти 8 лет назад

Security update for Chromium

6.5 Medium

CVSS3