chromium -- multiple vulnerabilitiesentered 2019-01-05
no CVE referenced
CVE details
CVE-2018-18351
Lack of proper validation of ancestor frames site when sending lax cookies in Navigation in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to bypass SameSite cookie policy via a crafted HTML page.
- Score
- 6.5 medium
- Published
- 2018-12-11
- Links
- NVD · cve.org · Report wrong data
Matched ports (0)
No port is within the affected range.