VULNERABILITY INTELLIGENCE
CVE-2017-18016
CVSS score5.3 MEDIUM
EPSS probability5.48%
CISA KEVNot currently listed
Published2018-01-11
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Description
Parity Browser 1.6.10 and earlier allows remote attackers to bypass the Same Origin Policy and obtain sensitive information by requesting other websites via the Parity web proxy engine (reusing the current website's token, which is not bound to an origin).
Weakness classification
- CWE-346: Origin Validation Error
Primary references
- cve@mitre.org — Exploit, Mailing List, Third Party Advisory
- cve@mitre.org — Patch, Third Party Advisory
- cve@mitre.org — Exploit, Technical Description, Third Party Advisory
- cve@mitre.org — Exploit, Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Mailing List, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Technical Description, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory, VDB Entry