Описание
The ResourceFetcher::canRequest function in core/fetch/ResourceFetcher.cpp in Blink, as used in Google Chrome before 36.0.1985.125, does not properly restrict subresource requests associated with SVG files, which allows remote attackers to bypass the Same Origin Policy via a crafted file.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | released | 36.0.1985.125-0ubuntu2 |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was released [36.0.1985.125-0ubuntu1.14.04.0~pkg1029]] |
| lucid | ignored | end of life |
| precise | released | 36.0.1985.125-0ubuntu1.12.04.0~pkg897 |
| trusty | released | 36.0.1985.125-0ubuntu1.14.04.0~pkg1029 |
| trusty/esm | DNE | trusty was released [36.0.1985.125-0ubuntu1.14.04.0~pkg1029] |
| upstream | released | 36.0.1985.125 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | released | 1.1.0-0ubuntu1 |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was released [1.0.4-0ubuntu0.14.04.1]] |
| lucid | DNE | |
| precise | DNE | |
| trusty | released | 1.0.4-0ubuntu0.14.04.1 |
| trusty/esm | DNE | trusty was released [1.0.4-0ubuntu0.14.04.1] |
| upstream | released | 1.0.4 |
Показывать по
EPSS
6.8 Medium
CVSS2
Связанные уязвимости
The ResourceFetcher::canRequest function in core/fetch/ResourceFetcher.cpp in Blink, as used in Google Chrome before 36.0.1985.125, does not properly restrict subresource requests associated with SVG files, which allows remote attackers to bypass the Same Origin Policy via a crafted file.
The ResourceFetcher::canRequest function in core/fetch/ResourceFetcher ...
The ResourceFetcher::canRequest function in core/fetch/ResourceFetcher.cpp in Blink, as used in Google Chrome before 36.0.1985.125, does not properly restrict subresource requests associated with SVG files, which allows remote attackers to bypass the Same Origin Policy via a crafted file.
Уязвимость браузера Google Chrome, позволяющая удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации
EPSS
6.8 Medium
CVSS2