Insufficient policy enforcement in WebSockets in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to bypass same origin policy via a crafted HTML page.
References
Link | Resource |
---|---|
http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00032.html | Broken Link |
http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00036.html | Broken Link |
https://access.redhat.com/errata/RHSA-2019:4238 | Third Party Advisory |
https://chromereleases.googleblog.com/2019/12/stable-channel-update-for-desktop.html | Vendor Advisory |
https://crbug.com/944619 | Permissions Required Vendor Advisory |
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2Z5M4FPUMDNX2LDPHJKN5ZV5GIS2AKNU/ | |
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N5CIQCVS6E3ULJCNU7YJXJPO2BLQZDTK/ | |
https://seclists.org/bugtraq/2020/Jan/27 | Mailing List Third Party Advisory |
https://security.gentoo.org/glsa/202003-08 | Third Party Advisory |
https://www.debian.org/security/2020/dsa-4606 | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
History
07 Nov 2023, 03:04
Type | Values Removed | Values Added |
---|---|---|
References |
|
|
Information
Published : 2019-12-10 22:15
Updated : 2024-02-28 17:28
NVD link : CVE-2019-13727
Mitre link : CVE-2019-13727
CVE.ORG link : CVE-2019-13727
JSON object : View
Products Affected
debian
- debian_linux
redhat
- enterprise_linux_for_scientific_computing
- enterprise_linux_workstation
- enterprise_linux_server
- enterprise_linux_desktop
- chrome
fedoraproject
- fedora
CWE
CWE-281
Improper Preservation of Permissions