Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:28744
HistoryDec 21, 2020 - 7:57 p.m.

Cross-origin Data Leak

2020-12-2119:57:58
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
chromium
cross-origin
data leak
vulnerability
google chrome
html page
media
insufficient policy enforcement
remote attacker

EPSS

0.009

Percentile

82.6%

chromium is vulnerable to cross-origin data leak. Insufficient policy enforcement in media in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page.