CVE-2019-5822

HIGH

Google Chrome <74.0.3729.108 - CSRF

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2019-5822. PoCs published by Silence-Rain.

AI-analyzed exploit summary This repository contains a proof-of-concept exploit for CVE-2019-5822, which involves a bypass mechanism for download restrictions in a web application. The exploit uses an Express server to serve malicious HTML and PHP files that redirect users to arbitrary URLs, demonstrating the vulnerability.

Description

Inappropriate implementation in Blink in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to bypass same origin policy via a crafted HTML page.

Exploits (1)

nomisec WORKING POC 1 stars

by Silence-Rain · poc

https://github.com/Silence-Rain/14-828_Exploitation_of_CVE-2019-5822

View Code ZIP pw:eip

This repository contains a proof-of-concept exploit for CVE-2019-5822, which involves a bypass mechanism for download restrictions in a web application. The exploit uses an Express server to serve malicious HTML and PHP files that redirect users to arbitrary URLs, demonstrating the vulnerability.

Classification

Working Poc 90%

Attack Type

Auth Bypass

Complexity

Moderate

Reliability

Reliable

Target: Unknown (likely a web application with download restrictions)

No auth needed

Prerequisites: Victim must visit the attacker-controlled server

MITRE ATT&CK