CVE-2017-17692

Samsung Internet Browser 5.4.02.3 allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via crafted JavaScript code that redirects to a child tab and rewrites the innerHTML property.

• CWE-200

• http://packetstormsecurity.com/files/145510/Samsung-Internet-Browser-SOP-Bypass.htmlExploit, Third Party Advisory, VDB Entry
• https://datarift.blogspot.in/p/samsung-interent-browser-sop-bypass-cve.htmlExploit, Third Party Advisory
• https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/samsung_browser_sop_bypass.rbExploit, Third Party Advisory
• https://www.exploit-db.com/exploits/43376/Exploit, Third Party Advisory, VDB Entry
• http://packetstormsecurity.com/files/145510/Samsung-Internet-Browser-SOP-Bypass.htmlExploit, Third Party Advisory, VDB Entry
• https://datarift.blogspot.in/p/samsung-interent-browser-sop-bypass-cve.htmlExploit, Third Party Advisory
• https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/samsung_browser_sop_bypass.rbExploit, Third Party Advisory
• https://www.exploit-db.com/exploits/43376/Exploit, Third Party Advisory, VDB Entry

Published

Dec 21, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-17683Panda Global Protection 17.0.1 allows a system crash via a 0…
• CVE-2017-17684Panda Global Protection 17.0.1 allows a system crash via a 0…
• CVE-2017-17688The OpenPGP specification allows a Cipher Feedback Mode (CFB…
• CVE-2017-17689The S/MIME specification allows a Cipher Block Chaining (CBC…
• CVE-2017-1769IBM Business Process Manager 8.6 is vulnerable to cross-site…
• CVE-2017-17691Homeputer CL Studio fur HomeMatic 4.0 Rel 160808 and earlier…
• CVE-2017-17693Techno - Portfolio Management Panel through 2017-11-16 does …
• CVE-2017-17694Techno - Portfolio Management Panel through 2017-11-16 allow…
• CVE-2017-17695Techno - Portfolio Management Panel through 2017-11-16 allow…
• CVE-2017-17696Techno - Portfolio Management Panel through 2017-11-16 allow…
• CVE-2017-17697The Ping() function in ui/api/target.go in Harbor through 1.…8.6
• CVE-2017-17698Zoho ManageEngine Password Manager Pro 9 before 9.4 (9400) h…