CVE-2013-6657

EPSS 0.27%
Veröffentlicht 24.02.2014 04:48:10
Zuletzt bearbeitet 11.04.2025 00:51:21
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

core/html/parser/XSSAuditor.cpp in the XSS auditor in Blink, as used in Google Chrome before 33.0.1750.117, inserts the about:blank URL during certain blocking of FORM elements within HTTP requests, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via unspecified vectors.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 8

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Google ≫ Chrome Version <= 33.0.1750.116

Google ≫ Chrome Version33.0.1750.0

Google ≫ Chrome Version33.0.1750.1

Google ≫ Chrome Version33.0.1750.2

Google ≫ Chrome Version33.0.1750.3

Google ≫ Chrome Version33.0.1750.4

Google ≫ Chrome Version33.0.1750.5

Google ≫ Chrome Version33.0.1750.6

Google ≫ Chrome Version33.0.1750.7

Google ≫ Chrome Version33.0.1750.8

Google ≫ Chrome Version33.0.1750.9

Google ≫ Chrome Version33.0.1750.10

Google ≫ Chrome Version33.0.1750.11

Google ≫ Chrome Version33.0.1750.12

Google ≫ Chrome Version33.0.1750.13

Google ≫ Chrome Version33.0.1750.14

Google ≫ Chrome Version33.0.1750.15

Google ≫ Chrome Version33.0.1750.16

Google ≫ Chrome Version33.0.1750.18

Google ≫ Chrome Version33.0.1750.19

Google ≫ Chrome Version33.0.1750.20

Google ≫ Chrome Version33.0.1750.21

Google ≫ Chrome Version33.0.1750.22

Google ≫ Chrome Version33.0.1750.23

Google ≫ Chrome Version33.0.1750.24

Google ≫ Chrome Version33.0.1750.25

Google ≫ Chrome Version33.0.1750.26

Google ≫ Chrome Version33.0.1750.27

Google ≫ Chrome Version33.0.1750.28

Google ≫ Chrome Version33.0.1750.29

Google ≫ Chrome Version33.0.1750.30

Google ≫ Chrome Version33.0.1750.31

Google ≫ Chrome Version33.0.1750.34

Google ≫ Chrome Version33.0.1750.35

Google ≫ Chrome Version33.0.1750.36

Google ≫ Chrome Version33.0.1750.37

Google ≫ Chrome Version33.0.1750.38

Google ≫ Chrome Version33.0.1750.39

Google ≫ Chrome Version33.0.1750.40

Google ≫ Chrome Version33.0.1750.41

Google ≫ Chrome Version33.0.1750.42

Google ≫ Chrome Version33.0.1750.43

Google ≫ Chrome Version33.0.1750.44

Google ≫ Chrome Version33.0.1750.45

Google ≫ Chrome Version33.0.1750.46

Google ≫ Chrome Version33.0.1750.47

Google ≫ Chrome Version33.0.1750.48

Google ≫ Chrome Version33.0.1750.49

Google ≫ Chrome Version33.0.1750.50

Google ≫ Chrome Version33.0.1750.51

Google ≫ Chrome Version33.0.1750.52

Google ≫ Chrome Version33.0.1750.53

Google ≫ Chrome Version33.0.1750.54

Google ≫ Chrome Version33.0.1750.55

Google ≫ Chrome Version33.0.1750.56

Google ≫ Chrome Version33.0.1750.57

Google ≫ Chrome Version33.0.1750.58

Google ≫ Chrome Version33.0.1750.59

Google ≫ Chrome Version33.0.1750.60

Google ≫ Chrome Version33.0.1750.61

Google ≫ Chrome Version33.0.1750.62

Google ≫ Chrome Version33.0.1750.63

Google ≫ Chrome Version33.0.1750.64

Google ≫ Chrome Version33.0.1750.65

Google ≫ Chrome Version33.0.1750.66

Google ≫ Chrome Version33.0.1750.67

Google ≫ Chrome Version33.0.1750.68

Google ≫ Chrome Version33.0.1750.69

Google ≫ Chrome Version33.0.1750.70

Google ≫ Chrome Version33.0.1750.71

Google ≫ Chrome Version33.0.1750.73

Google ≫ Chrome Version33.0.1750.74

Google ≫ Chrome Version33.0.1750.75

Google ≫ Chrome Version33.0.1750.76

Google ≫ Chrome Version33.0.1750.77

Google ≫ Chrome Version33.0.1750.79

Google ≫ Chrome Version33.0.1750.80

Google ≫ Chrome Version33.0.1750.81

Google ≫ Chrome Version33.0.1750.82

Google ≫ Chrome Version33.0.1750.83

Google ≫ Chrome Version33.0.1750.85

Google ≫ Chrome Version33.0.1750.88

Google ≫ Chrome Version33.0.1750.89

Google ≫ Chrome Version33.0.1750.90

Google ≫ Chrome Version33.0.1750.91

Google ≫ Chrome Version33.0.1750.92

Google ≫ Chrome Version33.0.1750.93

Google ≫ Chrome Version33.0.1750.104

Google ≫ Chrome Version33.0.1750.106

Google ≫ Chrome Version33.0.1750.107

Google ≫ Chrome Version33.0.1750.108

Google ≫ Chrome Version33.0.1750.109

Google ≫ Chrome Version33.0.1750.110

Google ≫ Chrome Version33.0.1750.111

Google ≫ Chrome Version33.0.1750.112

Google ≫ Chrome Version33.0.1750.113

Google ≫ Chrome Version33.0.1750.115

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.27%	0.477

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	6.4	10	4.9	AV:N/AC:L/Au:N/C:P/I:P/A:N

http://googlechromereleases.blogspot.com/2014/02/stable-channel-update_20.html

Vendor Advisory

http://lists.opensuse.org/opensuse-updates/2014-03/msg00006.html

http://www.debian.org/security/2014/dsa-2883

https://code.google.com/p/chromium/issues/detail?id=331060

https://src.chromium.org/viewvc/blink?revision=164538&view=revision

Patch

https://nvd.nist.gov/vuln/detail/CVE-2013-6657

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2013-6657

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2013-6657

EUVD