Medium severity4.3NVD Advisory· Published Sep 25, 2018· Updated Jun 17, 2026

CVE-2018-6051

Description

XSS Auditor in Google Chrome prior to 64.0.3282.119, did not ensure the reporting URL was in the same origin as the page it was on, which allowed a remote attacker to obtain referrer details via a crafted HTML page.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Google/Chromellm-fuzzy2 versions
<64.0.3282.119+ 1 more
- (no CPE)range: <64.0.3282.119
- (no CPE)range: unspecified
osv-coords5 versions
pkg:rpm/opensuse/chromium&distro=openSUSE%20Tumbleweed pkg:rpm/suse/chromium&distro=SUSE%20Package%20Hub%2012 pkg:rpm/suse/chromium&distro=SUSE%20Package%20Hub%2012%20SP2 pkg:rpm/suse/re2&distro=SUSE%20Package%20Hub%2012 pkg:rpm/suse/re2&distro=SUSE%20Package%20Hub%2012%20SP2
< 93.0.4577.82-1.1+ 4 more
- (no CPE)range: < 93.0.4577.82-1.1
- (no CPE)range: < 64.0.3282.119-46.2
- (no CPE)range: < 64.0.3282.119-46.2
- (no CPE)range: < 20180101-5.1
- (no CPE)range: < 20180101-5.1

cvss	0.280
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000

CVE-2018-6051

Description

AI Insight

Affected products

Patches

Vulnerability mechanics

References

News mentions