core/dom/Document.cpp in Blink, as used in Google Chrome prior to 43.0.2357.65, enables the inheritance of the designMode attribute, which allows remote malicious users to bypass the Same Origin Policy by leveraging the availability of editing.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
debian debian linux 8.0 |
||
google chrome |