Cross-site request forgery (CSRF) vulnerability in loader/DocumentThreadableLoader.cpp in WebCore in WebKit before r57041, as used in Google Chrome before 4.1.249.1059, allows remote attackers to hijack the authentication of unspecified victims via a crafted synchronous preflight XMLHttpRequest operation.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2010-09-24 12:00
Updated : 2017-09-18 18:30
NVD link : CVE-2010-1767
Mitre link : CVE-2010-1767
JSON object : View
CWE
CWE-352
Cross-Site Request Forgery (CSRF)
Products Affected
- chrome