Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2pp9-cmh9-mhg5

Опубликовано: 30 нояб. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

Insufficient validation of untrusted input in CORS in Google Chrome on Android prior to 108.0.5359.71 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)

Insufficient validation of untrusted input in CORS in Google Chrome on Android prior to 108.0.5359.71 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)

EPSS

Процентиль: 24%
0.00082
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-20
CWE-74

Связанные уязвимости

CVSS3: 4.3
ubuntu
около 3 лет назад

Insufficient validation of untrusted input in CORS in Google Chrome on Android prior to 108.0.5359.71 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)

CVSS3: 4.3
nvd
около 3 лет назад

Insufficient validation of untrusted input in CORS in Google Chrome on Android prior to 108.0.5359.71 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)

msrc
около 3 лет назад

Chromium: CVE-2022-4188 Insufficient validation of untrusted input in CORS

CVSS3: 4.3
debian
около 3 лет назад

Insufficient validation of untrusted input in CORS in Google Chrome on ...

CVSS3: 4.3
fstec
больше 3 лет назад

Уязвимость реализации механизма CORS браузеров Google Chrome и Microsoft Edge, позволяющая нарушителю обойти ограничения безопасности

EPSS

Процентиль: 24%
0.00082
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-20
CWE-74