Google : Security vulnerabilities, CVEs csrf, cross site request forgery published in 2010

CVE-2010-1767

Cross-site request forgery (CSRF) vulnerability in loader/DocumentThreadableLoader.cpp in WebCore in WebKit before r57041, as used in Google Chrome before 4.1.249.1059, allows remote attackers to hijack the authentication of unspecified victims via a crafted synchronous preflight XMLHttpRequest operation.

Max CVSS

6.8

EPSS Score

0.38%

Published

2010-09-24

Updated

2017-09-19

1 vulnerabilities found

Google : Security Vulnerabilities, CVEs, Published In 2010 (CSRF)

CVE-2010-1767