PT-2015-1676 · Google+1 · Google Chrome+1
Neobyte
+1
·
Publicado
2015-07-22
·
Atualizado
2024-06-15
·
CVE-2015-1275
CVSS v2.0
4.3
Média
| Vetor | AV:N/AC:M/Au:N/C:N/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 44.0.2403.89
Description
The issue is related to a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via a crafted intent URL. This can be achieved by appending a substring such as
alert(document.cookie);// to the URL. The vulnerability exists due to inadequate protection of the web page structure.Recommendations
For Google Chrome versions prior to 44.0.2403.89, update to version 44.0.2403.89 or later to resolve the issue. As a temporary workaround, consider restricting the use of intent URLs to minimize the risk of exploitation. Avoid using crafted intent URLs that may trigger the vulnerability until the issue is resolved.
Correção
XSS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Google Chrome
Suse