Логотип exploitDog
bind:CVE-2013-6166
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2013-6166

Количество 4

Количество 4

ubuntu логотип

CVE-2013-6166

почти 12 лет назад

Google Chrome before 29 sends HTTP Cookie headers without first validating that they have the required character-set restrictions, which allows remote attackers to conduct the equivalent of a persistent Logout CSRF attack via a crafted parameter that forces a web application to set a malformed cookie within an HTTP response.

CVSS2: 6.8
EPSS: Низкий
nvd логотип

CVE-2013-6166

почти 12 лет назад

Google Chrome before 29 sends HTTP Cookie headers without first validating that they have the required character-set restrictions, which allows remote attackers to conduct the equivalent of a persistent Logout CSRF attack via a crafted parameter that forces a web application to set a malformed cookie within an HTTP response.

CVSS2: 6.8
EPSS: Низкий
debian логотип

CVE-2013-6166

почти 12 лет назад

Google Chrome before 29 sends HTTP Cookie headers without first valida ...

CVSS2: 6.8
EPSS: Низкий
github логотип

GHSA-c3rj-c9pq-rmgx

больше 3 лет назад

Google Chrome before 29 sends HTTP Cookie headers without first validating that they have the required character-set restrictions, which allows remote attackers to conduct the equivalent of a persistent Logout CSRF attack via a crafted parameter that forces a web application to set a malformed cookie within an HTTP response.

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2013-6166

Google Chrome before 29 sends HTTP Cookie headers without first validating that they have the required character-set restrictions, which allows remote attackers to conduct the equivalent of a persistent Logout CSRF attack via a crafted parameter that forces a web application to set a malformed cookie within an HTTP response.

CVSS2: 6.8
1%
Низкий
почти 12 лет назад
nvd логотип
CVE-2013-6166

Google Chrome before 29 sends HTTP Cookie headers without first validating that they have the required character-set restrictions, which allows remote attackers to conduct the equivalent of a persistent Logout CSRF attack via a crafted parameter that forces a web application to set a malformed cookie within an HTTP response.

CVSS2: 6.8
1%
Низкий
почти 12 лет назад
debian логотип
CVE-2013-6166

Google Chrome before 29 sends HTTP Cookie headers without first valida ...

CVSS2: 6.8
1%
Низкий
почти 12 лет назад
github логотип
GHSA-c3rj-c9pq-rmgx

Google Chrome before 29 sends HTTP Cookie headers without first validating that they have the required character-set restrictions, which allows remote attackers to conduct the equivalent of a persistent Logout CSRF attack via a crafted parameter that forces a web application to set a malformed cookie within an HTTP response.

1%
Низкий
больше 3 лет назад

Уязвимостей на страницу