Back to search
CVE-2017-5069
Published: Oct 27, 2017
Modified: Aug 5, 2024
PUBLISHED
Description
Incorrect MIME type of XSS-Protection reports in Blink in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac, and 58.0.3029.83 for Android, allowed a remote attacker to circumvent Cross-Origin Resource Sharing checks via a crafted HTML page.
| Vendor | Product | Versions |
|---|---|---|
n/a | Google Chrome prior to 58.0.3029.81 for Linux, Windows and Mac, and 58.0.3029.83 for Android | affected Google Chrome prior to 58.0.3029.81 for Linux, Windows and Mac, and 58.0.3029.83 for Android |
References
RHSA-2017:1124
vendor-advisory
x_refsource_REDHAT
https://crbug.com/691726
x_refsource_MISC
GLSA-201705-02
vendor-advisory
x_refsource_GENTOO
1038317
vdb-entry
x_refsource_SECTRACK
97939
vdb-entry
x_refsource_BID
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now