CVE-2013-6657

EPSS 0.27%
Veröffentlicht 24.02.2014 04:48:10
Zuletzt bearbeitet 29.04.2026 01:13:23
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

core/html/parser/XSSAuditor.cpp in the XSS auditor in Blink, as used in Google Chrome before 33.0.1750.117, inserts the about:blank URL during certain blocking of FORM elements within HTTP requests, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via unspecified vectors.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 8

NVD 97 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Google ≫ Chrome Version <= 33.0.1750.116

Google ≫ Chrome Version33.0.1750.0

Google ≫ Chrome Version33.0.1750.1

Google ≫ Chrome Version33.0.1750.2

Google ≫ Chrome Version33.0.1750.3

Google ≫ Chrome Version33.0.1750.4

Google ≫ Chrome Version33.0.1750.5

Google ≫ Chrome Version33.0.1750.6

Google ≫ Chrome Version33.0.1750.7

Google ≫ Chrome Version33.0.1750.8

Google ≫ Chrome Version33.0.1750.9

Google ≫ Chrome Version33.0.1750.10

Google ≫ Chrome Version33.0.1750.11

Google ≫ Chrome Version33.0.1750.12

Google ≫ Chrome Version33.0.1750.13

Google ≫ Chrome Version33.0.1750.14

Google ≫ Chrome Version33.0.1750.15

Google ≫ Chrome Version33.0.1750.16

Google ≫ Chrome Version33.0.1750.18

Google ≫ Chrome Version33.0.1750.19

Google ≫ Chrome Version33.0.1750.20

Google ≫ Chrome Version33.0.1750.21

Google ≫ Chrome Version33.0.1750.22

Google ≫ Chrome Version33.0.1750.23

Google ≫ Chrome Version33.0.1750.24

Google ≫ Chrome Version33.0.1750.25

Google ≫ Chrome Version33.0.1750.26

Google ≫ Chrome Version33.0.1750.27

Google ≫ Chrome Version33.0.1750.28

Google ≫ Chrome Version33.0.1750.29

Google ≫ Chrome Version33.0.1750.30

Google ≫ Chrome Version33.0.1750.31

Google ≫ Chrome Version33.0.1750.34

Google ≫ Chrome Version33.0.1750.35

Google ≫ Chrome Version33.0.1750.36

Google ≫ Chrome Version33.0.1750.37

Google ≫ Chrome Version33.0.1750.38

Google ≫ Chrome Version33.0.1750.39

Google ≫ Chrome Version33.0.1750.40

Google ≫ Chrome Version33.0.1750.41

Google ≫ Chrome Version33.0.1750.42

Google ≫ Chrome Version33.0.1750.43

Google ≫ Chrome Version33.0.1750.44

Google ≫ Chrome Version33.0.1750.45

Google ≫ Chrome Version33.0.1750.46

Google ≫ Chrome Version33.0.1750.47

Google ≫ Chrome Version33.0.1750.48

Google ≫ Chrome Version33.0.1750.49

Google ≫ Chrome Version33.0.1750.50

Google ≫ Chrome Version33.0.1750.51

Google ≫ Chrome Version33.0.1750.52

Google ≫ Chrome Version33.0.1750.53

Google ≫ Chrome Version33.0.1750.54

Google ≫ Chrome Version33.0.1750.55

Google ≫ Chrome Version33.0.1750.56

Google ≫ Chrome Version33.0.1750.57

Google ≫ Chrome Version33.0.1750.58

Google ≫ Chrome Version33.0.1750.59

Google ≫ Chrome Version33.0.1750.60

Google ≫ Chrome Version33.0.1750.61

Google ≫ Chrome Version33.0.1750.62

Google ≫ Chrome Version33.0.1750.63

Google ≫ Chrome Version33.0.1750.64

Google ≫ Chrome Version33.0.1750.65

Google ≫ Chrome Version33.0.1750.66

Google ≫ Chrome Version33.0.1750.67

Google ≫ Chrome Version33.0.1750.68

Google ≫ Chrome Version33.0.1750.69

Google ≫ Chrome Version33.0.1750.70

Google ≫ Chrome Version33.0.1750.71

Google ≫ Chrome Version33.0.1750.73

Google ≫ Chrome Version33.0.1750.74

Google ≫ Chrome Version33.0.1750.75

Google ≫ Chrome Version33.0.1750.76

Google ≫ Chrome Version33.0.1750.77

Google ≫ Chrome Version33.0.1750.79

Google ≫ Chrome Version33.0.1750.80

Google ≫ Chrome Version33.0.1750.81

Google ≫ Chrome Version33.0.1750.82

Google ≫ Chrome Version33.0.1750.83

Google ≫ Chrome Version33.0.1750.85

Google ≫ Chrome Version33.0.1750.88

Google ≫ Chrome Version33.0.1750.89

Google ≫ Chrome Version33.0.1750.90

Google ≫ Chrome Version33.0.1750.91

Google ≫ Chrome Version33.0.1750.92

Google ≫ Chrome Version33.0.1750.93

Google ≫ Chrome Version33.0.1750.104

Google ≫ Chrome Version33.0.1750.106

Google ≫ Chrome Version33.0.1750.107

Google ≫ Chrome Version33.0.1750.108

Google ≫ Chrome Version33.0.1750.109

Google ≫ Chrome Version33.0.1750.110

Google ≫ Chrome Version33.0.1750.111

Google ≫ Chrome Version33.0.1750.112

Google ≫ Chrome Version33.0.1750.113

Google ≫ Chrome Version33.0.1750.115

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.27%	0.477

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	6.4	10	4.9	AV:N/AC:L/Au:N/C:P/I:P/A:N

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://googlechromereleases.blogspot.com/2014/02/stable-channel-update_20.html

Vendor Advisory

http://lists.opensuse.org/opensuse-updates/2014-03/msg00006.html

http://www.debian.org/security/2014/dsa-2883

https://code.google.com/p/chromium/issues/detail?id=331060

https://src.chromium.org/viewvc/blink?revision=164538&view=revision

Patch

https://nvd.nist.gov/vuln/detail/CVE-2013-6657

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2013-6657

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2013-6657

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2013-6657