Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8jmr-7phq-hgh7

Опубликовано: 02 нояб. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

Insufficient data validation in Extensions in Google Chrome prior to 107.0.5304.62 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted Chrome Extension. (Chrome security severity: Low)

Insufficient data validation in Extensions in Google Chrome prior to 107.0.5304.62 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted Chrome Extension. (Chrome security severity: Low)

EPSS

Процентиль: 29%
0.00108
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 4.3
ubuntu
больше 3 лет назад

Insufficient data validation in Extensions in Google Chrome prior to 107.0.5304.62 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted Chrome extension. (Chromium security severity: Low)

CVSS3: 4.3
nvd
больше 3 лет назад

Insufficient data validation in Extensions in Google Chrome prior to 107.0.5304.62 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted Chrome extension. (Chromium security severity: Low)

msrc
больше 3 лет назад

Chromium: CVE-2022-3661 Insufficient data validation in Extensions

CVSS3: 4.3
debian
больше 3 лет назад

Insufficient data validation in Extensions in Google Chrome prior to 1 ...

CVSS3: 7.4
fstec
больше 3 лет назад

Уязвимость расширений браузеров Google Chrome и Microsoft Edge, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 29%
0.00108
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-20