cve/2010/CVE-2010-0661.md
2024-06-18 02:51:15 +02:00

667 B

CVE-2010-0661

Description

WebCore/bindings/v8/custom/V8DOMWindowCustom.cpp in WebKit before r52401, as used in Google Chrome before 4.0.249.78, allows remote attackers to bypass the Same Origin Policy via vectors involving the window.open method.

POC

Reference

Github

No PoCs found on GitHub currently.