QwikSec

Security Database

CVE

CWE

Training

CVE-2013-6657

Published: Feb 24, 2014

Modified: Aug 6, 2024

PUBLISHED

Description

core/html/parser/XSSAuditor.cpp in the XSS auditor in Blink, as used in Google Chrome before 33.0.1750.117, inserts the about:blank URL during certain blocking of FORM elements within HTTP requests, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via unspecified vectors.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

vendor-advisory

x_refsource_DEBIAN

https://src.chromium.org/viewvc/blink?revision=164538&view=revision

x_refsource_CONFIRM

openSUSE-SU-2014:0327

vendor-advisory

x_refsource_SUSE

http://googlechromereleases.blogspot.com/2014/02/stable-channel-update_20.html

x_refsource_CONFIRM

https://code.google.com/p/chromium/issues/detail?id=331060

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.