CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.8. It affects Chrome. It may be remotely exploitable.
CVE
CVE-2014-3160
Severity
MEDIUM
CVSS
6.8
EPSS
1.34%
Chrome
Original NVD Description
The ResourceFetcher::canRequest function in core/fetch/ResourceFetcher.cpp in Blink, as used in Google Chrome before 36.0.1985.125, does not properly restrict subresource requests associated with SVG files, which allows remote attackers to bypass the Same Origin Policy via a crafted file.