Redhat » Enterprise Linux Server : Security Vulnerabilities, CVEs, Published In September 2018 (XSS)
XSS Auditor in Google Chrome prior to 64.0.3282.119, did not ensure the reporting URL was in the same origin as the page it was on, which allowed a remote attacker to obtain referrer details via a crafted HTML page.
Max CVSS
4.3
EPSS Score
0.81%
Published
2018-09-25
Updated
2018-11-15
1 vulnerabilities found