Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2018-18344

Опубликовано: 11 дек. 2018
Источник: debian

Описание

Inappropriate allowance of the setDownloadBehavior devtools protocol feature in Extensions in Google Chrome prior to 71.0.3578.80 allowed a remote attacker with control of an installed extension to access files on the local file system via a crafted Chrome Extension.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
chromiumfixed71.0.3578.80-1package

Связанные уязвимости

CVSS3: 6.5
ubuntu
около 7 лет назад

Inappropriate allowance of the setDownloadBehavior devtools protocol feature in Extensions in Google Chrome prior to 71.0.3578.80 allowed a remote attacker with control of an installed extension to access files on the local file system via a crafted Chrome Extension.

CVSS3: 8.8
redhat
около 7 лет назад

Inappropriate allowance of the setDownloadBehavior devtools protocol feature in Extensions in Google Chrome prior to 71.0.3578.80 allowed a remote attacker with control of an installed extension to access files on the local file system via a crafted Chrome Extension.

CVSS3: 6.5
nvd
около 7 лет назад

Inappropriate allowance of the setDownloadBehavior devtools protocol feature in Extensions in Google Chrome prior to 71.0.3578.80 allowed a remote attacker with control of an installed extension to access files on the local file system via a crafted Chrome Extension.

CVSS3: 6.5
github
больше 3 лет назад

Inappropriate allowance of the setDownloadBehavior devtools protocol feature in Extensions in Google Chrome prior to 71.0.3578.80 allowed a remote attacker with control of an installed extension to access files on the local file system via a crafted Chrome Extension.

CVSS3: 7.5
fstec
больше 7 лет назад

Уязвимость функции setDownloadBehavior веб-браузера Google Chrome, позволяющая нарушителю получить несанкционированный доступ к файлам в локальной файловой системе