Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.0

Google Chrome may expose users' redirect URLs

CVE-2010-0315 · published 16 years ago
Summary

Older versions of Google Chrome can let an attacker see the destination address of a redirect that a specific user is following on a website. This information leak occurs when the site URL is placed in a stylesheet link and the attacker reads the link value. Upgrade Chrome to a newer version to prevent this exposure.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
google chrome <= 4.0.249.78
0.2.149.27
0.2.149.29
0.2.149.30
0.2.152.1
0.2.153.1
0.3.154.0
0.3.154.3
0.4.154.18
0.4.154.22
0.4.154.31
0.4.154.33
35 more version ranges
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
Original advisory text
WebKit before r53607, as used in Google Chrome before 4.0.249.89, allows remote attackers to discover a redirect's target URL, for the session of a specific user of a web site, by placing the site'...
WebKit before r53607, as used in Google Chrome before 4.0.249.89, allows remote attackers to discover a redirect's target URL, for the session of a specific user of a web site, by placing the site's URL in the HREF attribute of a stylesheet LINK element, and then reading the document.styleSheets[0].href property value, related to an IFRAME element.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
5.0 Medium
Exploitation
7% chance of attack within 30 days
Timeline
Published14 Jan 2010
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2010-0315 · NVD
Track software like this
Free during beta