CVE-2013-6660

The drag-and-drop implementation in Google Chrome before 33.0.1750.117 does not properly restrict the information in WebDropData data structures, which allows…

published February 24, 2014

CVSS
—
EPSS
1%
Percentile
62.1
In the wild
Unconfirmed
What it is

The drag-and-drop implementation in Google Chrome before 33.0.1750.117 does not properly restrict the information in WebDropData data structures, which allows remote attackers to discover full pathnames via a crafted web site.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00987 · 62.1th percentile
Published
2014-02-24T02:00Z
EPSS history
Timeline
  • 24 FEB 02:00Z
    The drag-and-drop implementation in Google Chrome before 33.0.1750.117 does not properly restrict the information in WebDropData data structures, which allows…
    cvelistv5