Google Chrome < 18.104.22.168 Same Origin Policy Bypass Vulnerability
Medium Log Correlation Engine Plugin ID 800916
SynopsisThe remote host contains a web browser that is affected by a same origin bypass vulnerability.
DescriptionThe version of Google Chrome installed on the remote host is earlier than 22.214.171.124. Such versions are reportedly affected by a same origin policy bypass vulnerability when handling URLS with a 'chromehtml: ' protocol which could allow an attacker to run scripts of his choosing on any page or enumerate files on the local disk.
If a user has Google Chrome installed, visiting an attacker-controlled web page in another browser could cause Google Chrome to launch, open multiple tabs, and load scripts that run after navigating to a URL of the attacker's choice (Issue number 9860).
SolutionUpgrade to Google Chrome 126.96.36.199.