Описание
Inappropriate implementation in WebAuthentication in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to bypass same origin policy via a crafted HTML page.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| chromium | fixed | 101.0.4951.41-1 | package | |
| chromium | end-of-life | buster | package | |
| chromium | end-of-life | stretch | package |
Связанные уязвимости
Inappropriate implementation in WebAuthentication in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to bypass same origin policy via a crafted HTML page.
Inappropriate implementation in WebAuthentication in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to bypass same origin policy via a crafted HTML page.
Chromium: CVE-2022-1499 Inappropriate implementation in WebAuthentication
Inappropriate implementation in WebAuthentication in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to bypass same origin policy via a crafted HTML page.
Уязвимость механизма аутентификации пользователей WebAuthentication браузеров Microsoft Edge и Google Chrome, позволяющая нарушителю раскрыть защищаемую информацию