CVE-2010-1767

Published Sep 24, 2010 CVSS 2.0 · 6.8 Medium EPSS < 1% KEV · Not listed
Description
Cross-site request forgery (CSRF) vulnerability in loader/DocumentThreadableLoader.cpp in WebCore in WebKit before r57041, as used in Google Chrome before 4.1.249.1059, allows remote attackers to hijack the authentication of unspecified victims via a crafted synchronous preflight XMLHttpRequest operation.

Analysis

No analysis available yet

Remediation

No remediation available yet

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2010-1787 Cross-site request forgery (CSRF) vulnerability in loader/DocumentThreadableLoader.cpp in WebCore in WebKit before r57041, as used in Google Chrome before 4.1.249.1059, allows remote attackers to hijack the authentication of unspecified victims via a crafted synchronous preflight XMLHttpRequest operation.
History

No history.

Weaknesses
  • CWE-352

    Cross-Site Request Forgery (CSRF)

Sources

Status
PUBLISHED
Assigner
apple
Published
Updated
Aug 7, 2024, 1:35 AM
Reserved
May 6, 2010, 12:00 AM
Status
Modified
Published
Sep 24, 2010, 7:00 PM
Modified
Jun 16, 2026, 11:19 PM