The drag implementation in Google Chrome before 34.0.1847.116 allows user-assisted remote attackers to bypass the Same Origin Policy and forge local pathnames by leveraging renderer access.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Chrome | * | 34.0.1847.115 (including) |