CVE-2018-6654

The Grammarly extension before 2018-02-02 for Chrome allows remote attackers to discover authentication tokens via an 'action: "user"' request to iframe.gr_-ifr, because the exposure of these tokens is not restricted to any specific web site.

• CWE-346

• https://bugs.chromium.org/p/project-zero/issues/detail?id=1527Exploit, Issue Tracking, Third Party Advisory
• https://bugs.chromium.org/p/project-zero/issues/detail?id=1527Exploit, Issue Tracking, Third Party Advisory

Published

Feb 6, 2018

Last Modified

Jun 17, 2026

Status

Modified

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-6640A Heap Overflow (Remote Code Execution) issue was discovered…9.8
• CVE-2018-6641An Arbitrary Free (Remote Code Execution) issue was discover…9.8
• CVE-2018-6643Infoblox NetMRI 7.1.1 has Reflected Cross-Site Scripting via…
• CVE-2018-6644SBLIM Small Footprint CIM Broker (SFCB) 1.4.9 has a null poi…
• CVE-2018-6651In the uncurl_ws_accept function in uncurl.c in uncurl befor…
• CVE-2018-6653comforte SWAP 1049 through 1069 and 20.0.0 through 21.5.3 (a…
• CVE-2018-6655PHP Scripts Mall Doctor Search Script 1.0.2 has Stored XSS v…
• CVE-2018-6656Z-BlogPHP 1.5.1 has CSRF via zb_users/plugin/AppCentre/app_d…
• CVE-2018-6659Reflected Cross-Site Scripting vulnerability in McAfee ePoli…3.7
• CVE-2018-6660Directory Traversal vulnerability in McAfee ePolicy Orchestr…6.2
• CVE-2018-6661DLL Side-Loading vulnerability in Microsoft Windows Client i…7.8
• CVE-2018-6662Privilege Escalation vulnerability in McAfee Management of N…7.8