The OneClickSigninHelper::ShowInfoBarIfPossible function in browser/ui/sync/one_click_signin_helper.cc in Google Chrome before 31.0.1650.63 uses an incorrect URL during realm validation, which allows remote attackers to conduct session fixation attacks and hijack web sessions by triggering improper sync after a 302 (aka Found) HTTP status code.
CVSS Details
- CVSS 3.1 Base Score: 8.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Gentoo Linux | — | Upgrade dev-lang/v8.Upgrade www-client/chromium. | Oct 30, 2017 | Dec 6, 2013 |
| Google Chrome | — | Upgrade to the latest version of Google Chrome | Dec 12, 2013 | Dec 4, 2013 |
| Suse | — | Upgrade chromium-desktop-gnomeUpgrade chromiumUpgrade chromium-suid-helperUpgrade chromium-ffmpegsumoUpgrade chromium-desktop-kdeUpgrade chromedriver | Jan 9, 2014 | Dec 6, 2013 |
| Ubuntu | — | Upgrade chromium-browser | Nov 19, 2024 | Dec 7, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub