CVE-2010-0315
Google Chrome < 4.0.249.89 - URL Discovery via Stylesheet LINK Element
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2010-0315. PoCs published by Cesar Cerrudo.
AI-analyzed exploit summary This exploit demonstrates an information disclosure vulnerability in Google Chrome by leveraging a CSS stylesheet reference and JavaScript to extract the full path of the stylesheet, potentially revealing sensitive information.
Description
WebKit before r53607, as used in Google Chrome before 4.0.249.89, allows remote attackers to discover a redirect's target URL, for the session of a specific user of a web site, by placing the site's URL in the HREF attribute of a stylesheet LINK element, and then reading the document.styleSheets[0].href property value, related to an IFRAME element.
Exploits (1)
This exploit demonstrates an information disclosure vulnerability in Google Chrome by leveraging a CSS stylesheet reference and JavaScript to extract the full path of the stylesheet, potentially revealing sensitive information.