Skip to content
OpenAdvisories
Unscored CVE-2018-20067 EUVD-2018-12642GHSA-6q4j-9x7g-wqj4

A renderer initiated back navigation was incorrectly allowed to cancel a browser initiated one in Navigation in Google Chrome prior to 71.0…

Published Jan 9, 2019 · Updated Aug 5, 2024 · Assigned by Chrome

Vendor: Google Product: Chrome Package: chromium Category: Browsers Ecosystem: Debian

Description

A renderer initiated back navigation was incorrectly allowed to cancel a browser initiated one in Navigation in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to confuse the user about the origin of the current page via a crafted HTML page.

Affected products

VendorProductAffectedFixed
Google Chrome unspecified – < 71.0.3578.80 71.0.3578.80

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 chromium 71.0.3578.80-1 —
Debian 13 chromium 71.0.3578.80-1 —
Debian 12 chromium 71.0.3578.80-1 —
Debian 9 chromium-browser 71.0.3578.80-1~deb9u1 DSA-4352-1

Advisories 1

References