VULNERABILITY DETAILS
Chrome's "Save Password" feature will attempt to save the value of a
username field from before modifications done by having contents
dragged from it using the cursor.

This could result in a user accidentally saving their password in the
username field, and it being displayed in plaintext the next time the site
is accessed. It also breaks the ability to login, as the details saved
would not work.

VERSION
Chrome Version: 63.0.3239.132 (Official Build) (64-bit) (stable)
Operating System: Windows 8.1 Enterprise

REPRODUCTION CASE

1) A user navigates to a site which features a single "Username" and
"Password" field to login with.
2) The user types their username, and doesn't hit <TAB> (broken keyboard,
mistap, etc), and accidentally enters their username (Mary) and password
(BatteryStaple) in the username field - so it says "MaryBatteryStaple".
3) The user realises their mistake, so highlights then drags their
password to the password field.
4) The user presses <ENTER> or clicks the login button, to successfully
log into the site.
5) The user is prompted to remember their login details - Which will be
in the format:

Username: MaryBatteryStaple
Password: BatteryStaple
 

Deleted: ChromePasswordDragBug.png 34.4 KB

	ChromePasswordDragBug.png 34.4 KB View Download