Launchpad.net

CVE 2013-0909

The XSS Auditor in Google Chrome before 25.0.1364.152 allows remote attackers to obtain sensitive HTTP Referer information via unspecified vectors.

See the CVE page on Mitre.org for more details.