Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:28468
HistoryDec 06, 2020 - 4:44 a.m.

Improper Input Validation

2020-12-0604:44:23
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11

0.006 Low

EPSS

Percentile

79.0%

chromium is vulnerable to improper input validation. The vulnerability exists due to lack of validation of ancestor frames site when sending lax cookies in navigation in Google Chrome, allowing a malicious user to bypass SameSite cookie policy via a crafted HTML page.