Security Advisory

CVE-2017-15419

6.5
MEDIUM

Vulnerability Description

Insufficient policy enforcement in Resource Timing API in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to infer browsing history by triggering a leaked cross-origin URL via a crafted HTML page.
Published Date August 28, 2018
Official Source NIST NVD Advisory