CVE-2019-5814: CORS bypass in Blink
Insufficient policy enforcement in Blink in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
Credit
Affected Software
Remediation
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is CVE-2019-5814?
CVE-2019-5814 is a vulnerability in Google Chrome that allows a remote attacker to leak cross-origin data via a crafted HTML page.
How severe is CVE-2019-5814?
CVE-2019-5814 has a severity rating of 6.5 out of 10, making it a medium severity vulnerability.
Which software versions are affected by CVE-2019-5814?
Google Chrome versions prior to 74.0.3729.108, openSUSE Backports for SLE-15, openSUSE Leap 15.0, openSUSE Leap 15.1, openSUSE Leap 42.3, Debian Debian Linux 10.0, Fedoraproject Fedora 29, Fedoraproject Fedora 30, and the Chromium package from Debian are affected by CVE-2019-5814.
How can I fix CVE-2019-5814?
To fix CVE-2019-5814, update your Google Chrome browser to version 74.0.3729.108 or later, or update the affected software package to the specified versions.
Where can I find more information about CVE-2019-5814?
You can find more information about CVE-2019-5814 at the following references: [1] http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html, [2] https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html, [3] https://crbug.com/930057.