VULNERABILITY DETAILS

When the download prompt is called it stays on top of the browser making it easy to fool the client, the attacker can request a download and then open a link

VERSION
Chrome Version: 56.0.2924.87 (64-bit) stable
Operating System: [Windows 10, Home single language, and more recent service pack]

REPRODUCTION CASE
Open site: https://save-acab.rhcloud.com for simulate or download file

Solution: Open the download prompt in the tabs of sites individually with your domain



 

Deleted: index.html 390 bytes

index.html 390 bytes View Download

Deleted: Rec#01.avi 4.2 MB

Rec#01.avi 4.2 MB Download