Description
Cross-site request forgery (CSRF) vulnerability in loader/DocumentThreadableLoader.cpp in WebCore in WebKit before r57041, as used in Google Chrome before 4.1.249.1059, allows remote attackers to hijack the authentication of unspecified victims via a crafted synchronous preflight XMLHttpRequest operation.
Analysis and contextual insights are available on OpenCVE Cloud.
Remediation
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2010-1787 | Cross-site request forgery (CSRF) vulnerability in loader/DocumentThreadableLoader.cpp in WebCore in WebKit before r57041, as used in Google Chrome before 4.1.249.1059, allows remote attackers to hijack the authentication of unspecified victims via a crafted synchronous preflight XMLHttpRequest operation. |
References
History
No history.
Status: PUBLISHED
Assigner: apple
Published:
Updated: 2024-08-07T01:35:53.794Z
Reserved: 2010-05-06T00:00:00.000Z
Link: CVE-2010-1767
No data.
Status : Modified
Published: 2010-09-24T19:00:04.107
Modified: 2026-04-29T01:13:23.040
Link: CVE-2010-1767
No data.
OpenCVE Enrichment
No data.
Weaknesses
EUVD