VULNERABILITY INTELLIGENCE
CVE-2010-0660
CVSS score5 MEDIUM
EPSS probability0.76%
CISA KEVNot currently listed
Published2010-02-18
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:N/A:N
Description
Google Chrome before 4.0.249.78 sends an https URL in the Referer header of an http request in certain circumstances involving https to http redirection, which allows remote HTTP servers to obtain potentially sensitive information via standard HTTP logging.
Weakness classification
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor