Security Advisory

CVE-2018-6051

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2018-09-25 14:00:00

Last updated 2024-08-05 05:54:52

Assigner Chrome

State PUBLISHED

Description

XSS Auditor in Google Chrome prior to 64.0.3282.119, did not ensure the reporting URL was in the same origin as the page it was on, which allowed a remote attacker to obtain referrer details via a crafted HTML page.

← Browse all CVEs View on cve.org ↗