CVEvulnerability

CVE-2010-1767

6.8 MEDIUM Published 2010-09-24 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2010-09-24
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-352

Description

Cross-site request forgery (CSRF) vulnerability in loader/DocumentThreadableLoader.cpp in WebCore in WebKit before r57041, as used in Google Chrome before 4.1.249.1059, allows remote attackers to hijack the authentication of unspecified victims via a crafted synchronous preflight XMLHttpRequest operation.

Affected configurations

• google chrome (<= 4.1.249.1058) • google chrome 1.0.154.53 • google chrome 1.0.154.59 • google chrome 1.0.154.64 • google chrome 1.0.154.65 • google chrome 2.0.169.0 • google chrome 2.0.169.1 • google chrome 2.0.170.0 • google chrome 2.0.172.2 • google chrome 2.0.172.8 • google chrome 2.0.172.27 • google chrome 2.0.172.28 • google chrome 2.0.172.30 • google chrome 2.0.172.33 • google chrome 2.0.172.37 • google chrome 2.0.172.38 • google chrome 3.0.182.2 • google chrome 3.0.195.2 • google chrome 3.0.195.21 • google chrome 3.0.195.24 • google chrome 3.0.195.25 • google chrome 3.0.195.27 • google chrome 3.0.195.33 • google chrome 3.0.195.36 • google chrome 3.0.195.37 • google chrome 3.0.195.38 • google chrome 4.0.212.0 • google chrome 4.0.212.1 • google chrome 4.0.221.8 • google chrome 4.0.222.0 • google chrome 4.0.222.1 • google chrome 4.0.222.5 • google chrome 4.0.222.12 • google chrome 4.0.223.0 • google chrome 4.0.223.1 • google chrome 4.0.223.2 • google chrome 4.0.223.4 • google chrome 4.0.223.5 • google chrome 4.0.223.7 • google chrome 4.0.223.8 • google chrome 4.0.223.9 • google chrome 4.0.224.0 • google chrome 4.0.229.1 • google chrome 4.0.235.0 • google chrome 4.0.236.0 • google chrome 4.0.237.0 • google chrome 4.0.237.1 • google chrome 4.0.239.0 • google chrome 4.0.240.0 • google chrome 4.0.241.0 • google chrome 4.0.242.0 • google chrome 4.0.243.0 • google chrome 4.0.244.0 • google chrome 4.0.245.0 • google chrome 4.0.245.1 • google chrome 4.0.246.0 • google chrome 4.0.247.0 • google chrome 4.0.248.0 • google chrome 4.0.249.0 • google chrome 4.0.249.1 … and 174 more

Related

Weakness · CWE (1)

  • CWE-352 Cross-Site Request Forgery weakness

References