Approved changes feed: RSS · Atom

cpe:2.3:a:parity:browser:1.6.10:*:*:*:*:*:*:*

part: a version: 1.6.10 update: *

VendorParity (d4191ed2-5da2-54f0-a37b-57baccf1aafa)
ProductBrowser (2e5496c1-627c-5f72-90a2-eee3efb1862f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/parity-js/shell purl2cpe 2026-06-01 10:16:24.387036

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-18016 vulnerable 2026-06-08 05:09:10.173696 Details available
Parity Browser 1.6.10 and earlier allows remote attackers to bypass the Same Origin Policy and obtain sensitive information by requesting other websites via the Parity web proxy engine (reusing the current website's token, which is not bound to an origin).
Published: 2018-01-11T16:00:00.000Z
Updated: 2024-08-05T21:06:50.142Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.