Security Advisory

CVE-2015-1292

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2015-09-03 22:00:00
Last updated 2024-08-06 04:40:18
Assigner Chrome
CVSS score not scored
State PUBLISHED

Description

The NavigatorServiceWorker::serviceWorker function in modules/serviceworkers/NavigatorServiceWorker.cpp in Blink, as used in Google Chrome before 45.0.2454.85, allows remote attackers to bypass the Same Origin Policy by accessing a Service Worker.