CVE-2013-2849 - Multiple cross-site scripting (XSS) vulnerabilities in Google Chrome before 27.0.1453.93 allow user-assisted remote attackers to inject arbitrary web script or HTML via vectors involving a (1) drag-and-drop or (2) copy-and-paste operation

Back Back to CVE browser

MEDIUM

Multiple cross-site scripting (XSS) vulnerabilities in Google Chrome before 27.0.1453.93 allow user-assisted remote attackers to inject arbitrary web script or HTML via vectors involving a (1) drag-and-drop or (2) copy-and-paste operation

Published May 22, 2013

4.3

MEDIUM

CVSS 2.0

EPSS 1.31%

Description

Multiple cross-site scripting (XSS) vulnerabilities in Google Chrome before 27.0.1453.93 allow user-assisted remote attackers to inject arbitrary web script or HTML via vectors involving a (1) drag-and-drop or (2) copy-and-paste operation.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (4)

http://googlechromereleases.blogspot.com/2013/05/stable-channel-release.html
x_refsource_CONFIRM
http://www.debian.org/security/2013/dsa-2695
vendor-advisoryx_refsource_DEBIAN
https://code.google.com/p/chromium/issues/detail?id=171392
x_refsource_CONFIRM
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16753
vdb-entrysignaturex_refsource_OVAL

Link	Providers	Tags
http://googlechromereleases.blogspot.com/2013/05/stable-channel-release.html		x_refsource_CONFIRM
http://www.debian.org/security/2013/dsa-2695		vendor-advisoryx_refsource_DEBIAN
https://code.google.com/p/chromium/issues/detail?id=171392		x_refsource_CONFIRM
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16753		vdb-entrysignaturex_refsource_OVAL