CVEvulnerability

CVE-2013-0909

5.0 MEDIUM Published 2013-03-05 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2013-03-05
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-200

Description

The XSS Auditor in Google Chrome before 25.0.1364.152 allows remote attackers to obtain sensitive HTTP Referer information via unspecified vectors.

Affected configurations

• google chrome (<= 25.0.1364.126) • google chrome 25.0.1364.0 • google chrome 25.0.1364.1 • google chrome 25.0.1364.2 • google chrome 25.0.1364.3 • google chrome 25.0.1364.5 • google chrome 25.0.1364.7 • google chrome 25.0.1364.8 • google chrome 25.0.1364.9 • google chrome 25.0.1364.10 • google chrome 25.0.1364.11 • google chrome 25.0.1364.12 • google chrome 25.0.1364.13 • google chrome 25.0.1364.14 • google chrome 25.0.1364.15 • google chrome 25.0.1364.16 • google chrome 25.0.1364.17 • google chrome 25.0.1364.18 • google chrome 25.0.1364.19 • google chrome 25.0.1364.20 • google chrome 25.0.1364.21 • google chrome 25.0.1364.22 • google chrome 25.0.1364.23 • google chrome 25.0.1364.24 • google chrome 25.0.1364.25 • google chrome 25.0.1364.26 • google chrome 25.0.1364.27 • google chrome 25.0.1364.28 • google chrome 25.0.1364.29 • google chrome 25.0.1364.30 • google chrome 25.0.1364.31 • google chrome 25.0.1364.32 • google chrome 25.0.1364.33 • google chrome 25.0.1364.34 • google chrome 25.0.1364.35 • google chrome 25.0.1364.36 • google chrome 25.0.1364.37 • google chrome 25.0.1364.38 • google chrome 25.0.1364.39 • google chrome 25.0.1364.40 • google chrome 25.0.1364.41 • google chrome 25.0.1364.42 • google chrome 25.0.1364.43 • google chrome 25.0.1364.44 • google chrome 25.0.1364.45 • google chrome 25.0.1364.46 • google chrome 25.0.1364.47 • google chrome 25.0.1364.48 • google chrome 25.0.1364.49 • google chrome 25.0.1364.50 • google chrome 25.0.1364.51 • google chrome 25.0.1364.52 • google chrome 25.0.1364.53 • google chrome 25.0.1364.54 • google chrome 25.0.1364.55 • google chrome 25.0.1364.56 • google chrome 25.0.1364.57 • google chrome 25.0.1364.58 • google chrome 25.0.1364.61 • google chrome 25.0.1364.62 … and 46 more

Related

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References