Security Advisory

CVE-2018-19334

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2018-11-20 09:00:00

Last updated 2024-08-05 11:37:09

Assigner mitre

State PUBLISHED

Description

Google Monorail before 2018-05-04 has a Cross-Site Search (XS-Search) vulnerability because CSV downloads are affected by CSRF, and calculations of download times (for requests with an unsupported axis) can be used to obtain sensitive information about the content of bug reports.

← Browse all CVEs View on cve.org ↗