CVE-2012-4904 — Cross-site Scripting in Google Chrome

CWE-79 — Cross-site Scripting2 documents2 sources
Severity
4.3MEDIUMNVD
EPSS
0.2%
top 64.60%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Google Chrome
Timeline
PublishedSep 13
Latest updateMay 17

Description

Cross-application scripting vulnerability in Google Chrome before 18.0.1025308 on Android allows remote attackers to inject arbitrary web script via unspecified vectors, as demonstrated by "Universal XSS (UXSS)" attacks against the current tab.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages1 packages

▶NVDgoogle/chrome18.0.1025306

🔴Vulnerability Details

1
GHSA
GHSA-v3cx-744x-wrj6: Cross-application scripting vulnerability in Google Chrome before 18↗2022-05-17
▶
CVE-2012-4904 — Cross-site Scripting in Google Chrome | cvebase