Cross-site request forgery (CSRF) vulnerability in loader/DocumentThreadableLoader.cpp in WebCore in WebKit before r57041, as used in Google Chrome before 4.1.249.1059, allows remote attackers to hijack the authentication of unspecified victims via a crafted synchronous preflight XMLHttpRequest operation.
References
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2010-09-24 19:00
Updated : 2017-09-19 01:30
NVD link : CVE-2010-1767
Mitre link : CVE-2010-1767
CVE.ORG link : CVE-2010-1767
JSON object : View
Products Affected
- chrome
CWE
CWE-352
Cross-Site Request Forgery (CSRF)