CVE-2018-6051

—

CVSS 3.0

4.3 medium

EPSS

1%p69

Published

Sep 25, 2018 (Sep 25, 2018)

Modified

Jun 17, 2026

Description

XSS Auditor in Google Chrome prior to 64.0.3282.119, did not ensure the reporting URL was in the same origin as the page it was on, which allowed a remote attacker to obtain referrer details via a crafted HTML page.

Vendors: google debian redhat
Products: chrome, debian linux, enterprise linux desktop, enterprise linux server, enterprise linux workstation
Weakness: CWE-79
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.3%)

In the news0 stories

No ingested article mentions this CVE yet.