CVE-2021-21125

Опубликовано: 09 фев. 2021

Источник: debian

Описание

Insufficient policy enforcement in File System API in Google Chrome on Windows prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.

Пакеты

Пакет	Статус	Версия исправления	Релиз	Тип
chromium	fixed	88.0.4324.96-0.1		package
chromium	end-of-life		stretch	package

Связанные уязвимости

CVE-2021-21125

CVSS3: 8.1

ubuntu

больше 5 лет назад

Insufficient policy enforcement in File System API in Google Chrome on Windows prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.

CVE-2021-21125

CVSS3: 8.1

nvd

больше 5 лет назад

Insufficient policy enforcement in File System API in Google Chrome on Windows prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.

CVE-2021-21125

msrc

больше 5 лет назад

Chromium CVE-2021-21125: Insufficient policy enforcement in File System API

GHSA-wvv5-jgqq-j444

CVSS3: 8.1

github

около 4 лет назад

Insufficient policy enforcement in File System API in Google Chrome on Windows prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.

BDU:2021-00908

CVSS3: 8.1

fstec

больше 5 лет назад

Уязвимость интерфейса File System API веб-браузера Google Chrome, позволяющая нарушителю обойти существующие ограничения безопасности