chromium -- vulnerabilityentered 2018-04-24
no CVE referenced
CVE details
CVE-2018-6089
A lack of CORS checks, after a Service Worker redirected to a cross-origin PDF, in Service Worker in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to leak limited cross-origin data via a crafted HTML page.
- Score
- 6.5 medium
- Published
- 2018-12-04
- Links
- NVD · cve.org · Report wrong data
Matched ports (0)
No port is within the affected range.