CVE-2018-19335

Google Monorail before 2018-06-07 has a Cross-Site Search (XS-Search) vulnerability because CSV downloads are affected by CSRF, and calculations of download…

published November 20, 2018

CVSS
—
EPSS
0%
Percentile
27.7
In the wild
Unconfirmed
What it is

Google Monorail before 2018-06-07 has a Cross-Site Search (XS-Search) vulnerability because CSV downloads are affected by CSRF, and calculations of download times (for requests with a crafted groupby value) can be used to obtain sensitive information about the content of bug reports.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00353 · 27.7th percentile
Published
2018-11-20T09:00Z
EPSS history
Timeline
  • 20 NOV 09:00Z
    Google Monorail before 2018-06-07 has a Cross-Site Search (XS-Search) vulnerability because CSV downloads are affected by CSRF, and calculations of download…
    cvelistv5