Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-28m3-c955-h29j

Опубликовано: 31 мая 2023
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

Inappropriate implementation in Downloads in Google Chrome prior to 114.0.5735.90 allowed an attacker who convinced a user to install a malicious extension to bypass file access restrictions via a crafted HTML page. (Chromium security severity: Medium)

Inappropriate implementation in Downloads in Google Chrome prior to 114.0.5735.90 allowed an attacker who convinced a user to install a malicious extension to bypass file access restrictions via a crafted HTML page. (Chromium security severity: Medium)

EPSS

Процентиль: 4%
0.00022
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-284

Связанные уязвимости

CVSS3: 6.5
ubuntu
около 2 лет назад

Inappropriate implementation in Downloads in Google Chrome prior to 114.0.5735.90 allowed an attacker who convinced a user to install a malicious extension to bypass file access restrictions via a crafted HTML page. (Chromium security severity: Medium)

CVSS3: 6.5
nvd
около 2 лет назад

Inappropriate implementation in Downloads in Google Chrome prior to 114.0.5735.90 allowed an attacker who convinced a user to install a malicious extension to bypass file access restrictions via a crafted HTML page. (Chromium security severity: Medium)

msrc
около 2 лет назад

Chromium: CVE-2023-2940 Inappropriate implementation in Downloads

CVSS3: 6.5
debian
около 2 лет назад

Inappropriate implementation in Downloads in Google Chrome prior to 11 ...

CVSS3: 6.5
fstec
около 2 лет назад

Уязвимость загрузчика браузера Google Chrome, позволяющая нарушителю обойти существующие ограничения безопасности

EPSS

Процентиль: 4%
0.00022
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-284