cve/2014/CVE-2014-1701.md

CVE-2014-1701

Description

The GenerateFunction function in bindings/scripts/code_generator_v8.pm in Blink, as used in Google Chrome before 33.0.1750.149, does not implement a certain cross-origin restriction for the EventTarget::dispatchEvent function, which allows remote attackers to conduct Universal XSS (UXSS) attacks via vectors involving events.

POC

Reference

No PoCs from references.

Github

• https://github.com/0xR0/uxss-db
• https://github.com/ARPSyndicate/cvemon
• https://github.com/Metnew/uxss-db
• https://github.com/lnick2023/nicenice
• https://github.com/qazbnm456/awesome-cve-poc
• https://github.com/xbl3/awesome-cve-poc_qazbnm456