CVE-2013-6657

EPSS 1.17%
Veröffentlicht 24.02.2014 04:48:10
Zuletzt bearbeitet 29.04.2026 01:13:23
Erkennungen
Login

core/html/parser/XSSAuditor.cpp in the XSS auditor in Blink, as used in Google Chrome before 33.0.1750.117, inserts the about:blank URL during certain blocking of FORM elements within HTTP requests, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via unspecified vectors.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 8

NVD 97 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Google ≫ Chrome Version <= 33.0.1750.116

Google ≫ Chrome Version 33.0.1750.0

Google ≫ Chrome Version 33.0.1750.1

Google ≫ Chrome Version 33.0.1750.2

Google ≫ Chrome Version 33.0.1750.3

Google ≫ Chrome Version 33.0.1750.4

Google ≫ Chrome Version 33.0.1750.5

Google ≫ Chrome Version 33.0.1750.6

Google ≫ Chrome Version 33.0.1750.7

Google ≫ Chrome Version 33.0.1750.8

Google ≫ Chrome Version 33.0.1750.9

Google ≫ Chrome Version 33.0.1750.10

Google ≫ Chrome Version 33.0.1750.11

Google ≫ Chrome Version 33.0.1750.12

Google ≫ Chrome Version 33.0.1750.13

Google ≫ Chrome Version 33.0.1750.14

Google ≫ Chrome Version 33.0.1750.15

Google ≫ Chrome Version 33.0.1750.16

Google ≫ Chrome Version 33.0.1750.18

Google ≫ Chrome Version 33.0.1750.19

Google ≫ Chrome Version 33.0.1750.20

Google ≫ Chrome Version 33.0.1750.21

Google ≫ Chrome Version 33.0.1750.22

Google ≫ Chrome Version 33.0.1750.23

Google ≫ Chrome Version 33.0.1750.24

Google ≫ Chrome Version 33.0.1750.25

Google ≫ Chrome Version 33.0.1750.26

Google ≫ Chrome Version 33.0.1750.27

Google ≫ Chrome Version 33.0.1750.28

Google ≫ Chrome Version 33.0.1750.29

Google ≫ Chrome Version 33.0.1750.30

Google ≫ Chrome Version 33.0.1750.31

Google ≫ Chrome Version 33.0.1750.34

Google ≫ Chrome Version 33.0.1750.35

Google ≫ Chrome Version 33.0.1750.36

Google ≫ Chrome Version 33.0.1750.37

Google ≫ Chrome Version 33.0.1750.38

Google ≫ Chrome Version 33.0.1750.39

Google ≫ Chrome Version 33.0.1750.40

Google ≫ Chrome Version 33.0.1750.41

Google ≫ Chrome Version 33.0.1750.42

Google ≫ Chrome Version 33.0.1750.43

Google ≫ Chrome Version 33.0.1750.44

Google ≫ Chrome Version 33.0.1750.45

Google ≫ Chrome Version 33.0.1750.46

Google ≫ Chrome Version 33.0.1750.47

Google ≫ Chrome Version 33.0.1750.48

Google ≫ Chrome Version 33.0.1750.49

Google ≫ Chrome Version 33.0.1750.50

Google ≫ Chrome Version 33.0.1750.51

Google ≫ Chrome Version 33.0.1750.52

Google ≫ Chrome Version 33.0.1750.53

Google ≫ Chrome Version 33.0.1750.54

Google ≫ Chrome Version 33.0.1750.55

Google ≫ Chrome Version 33.0.1750.56

Google ≫ Chrome Version 33.0.1750.57

Google ≫ Chrome Version 33.0.1750.58

Google ≫ Chrome Version 33.0.1750.59

Google ≫ Chrome Version 33.0.1750.60

Google ≫ Chrome Version 33.0.1750.61

Google ≫ Chrome Version 33.0.1750.62

Google ≫ Chrome Version 33.0.1750.63

Google ≫ Chrome Version 33.0.1750.64

Google ≫ Chrome Version 33.0.1750.65

Google ≫ Chrome Version 33.0.1750.66

Google ≫ Chrome Version 33.0.1750.67

Google ≫ Chrome Version 33.0.1750.68

Google ≫ Chrome Version 33.0.1750.69

Google ≫ Chrome Version 33.0.1750.70

Google ≫ Chrome Version 33.0.1750.71

Google ≫ Chrome Version 33.0.1750.73

Google ≫ Chrome Version 33.0.1750.74

Google ≫ Chrome Version 33.0.1750.75

Google ≫ Chrome Version 33.0.1750.76

Google ≫ Chrome Version 33.0.1750.77

Google ≫ Chrome Version 33.0.1750.79

Google ≫ Chrome Version 33.0.1750.80

Google ≫ Chrome Version 33.0.1750.81

Google ≫ Chrome Version 33.0.1750.82

Google ≫ Chrome Version 33.0.1750.83

Google ≫ Chrome Version 33.0.1750.85

Google ≫ Chrome Version 33.0.1750.88

Google ≫ Chrome Version 33.0.1750.89

Google ≫ Chrome Version 33.0.1750.90

Google ≫ Chrome Version 33.0.1750.91

Google ≫ Chrome Version 33.0.1750.92

Google ≫ Chrome Version 33.0.1750.93

Google ≫ Chrome Version 33.0.1750.104

Google ≫ Chrome Version 33.0.1750.106

Google ≫ Chrome Version 33.0.1750.107

Google ≫ Chrome Version 33.0.1750.108

Google ≫ Chrome Version 33.0.1750.109

Google ≫ Chrome Version 33.0.1750.110

Google ≫ Chrome Version 33.0.1750.111

Google ≫ Chrome Version 33.0.1750.112

Google ≫ Chrome Version 33.0.1750.113

Google ≫ Chrome Version 33.0.1750.115

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.17%	0.637

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	6.4	10	4.9	AV:N/AC:L/Au:N/C:P/I:P/A:N

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://googlechromereleases.blogspot.com/2014/02/stable-channel-update_20.html

Vendor Advisory

http://lists.opensuse.org/opensuse-updates/2014-03/msg00006.html

http://www.debian.org/security/2014/dsa-2883

https://code.google.com/p/chromium/issues/detail?id=331060

https://src.chromium.org/viewvc/blink?revision=164538&view=revision

Patch

https://nvd.nist.gov/vuln/detail/CVE-2013-6657

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2013-6657

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2013-6657

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2013-6657