CVE-2017-18016

Description

Parity Browser 1.6.10 and earlier allows remote attackers to bypass the Same Origin Policy and obtain sensitive information by requesting other websites via the Parity web proxy engine (reusing the current website's token, which is not bound to an origin).

CVSS Version 3.0

nvd

CVE ID: CVE-2017-18016
Base Score: 5.3
Base Severity: MEDIUM
Vector String:CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CVSS Version 2.0

nvd

CVE ID: CVE-2017-18016
Base Score: 5.0
Base Severity: MEDIUM
Vector String:AV:N/AC:L/Au:N/C:P/I:N/A:N

Content on GitHub

tintinweb | watchers:258

pub
Vulnerability Notes, PoC Exploits and Write-Ups for security issues disclosed by tintinweb

Refrence: GitHub

Refrence: NVD