CVE-2010-2301 — Cross-site Scripting in Google Chrome

CWE-79 — Cross-site Scripting3 documents3 sources
Severity
4.3MEDIUMNVD
EPSS
0.5%
top 33.97%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
Google ChromeOpensuseSuse Linux Enterprise Desktop+1 more
Timeline
PublishedJun 15
Latest updateMay 13

Description

Cross-site scripting (XSS) vulnerability in editing/markup.cpp in WebCore in WebKit in Google Chrome before 5.0.375.70 allows remote attackers to inject arbitrary web script or HTML via vectors related to the node.innerHTML property of a TEXTAREA element. NOTE: this might overlap CVE-2010-1762.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages4 packages

▶NVDgoogle/chrome< 5.0.375.70
▶NVDopensuse/opensuse11.2, 11.3+1

Patches

Patch: bugs.webkit.org ↗Patch: bugs.webkit.org ↗

🔴Vulnerability Details

2
GHSA
GHSA-jggr-9j53-5ggr: Cross-site scripting (XSS) vulnerability in editing/markup↗2022-05-13
▶
CVEList
CVE-2010-2301: Cross-site scripting (XSS) vulnerability in editing/markup↗2010-06-15
▶
CVE-2010-2301 — Cross-site Scripting in Google Chrome | cvebase