Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8qp3-mmfx-p4h5

Опубликовано: 28 июл. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

Insufficient policy enforcement in Extensions API in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to bypass downloads policy via a crafted HTML page.

Insufficient policy enforcement in Extensions API in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to bypass downloads policy via a crafted HTML page.

EPSS

Процентиль: 42%
0.00203
Низкий

4.3 Medium

CVSS3

Связанные уязвимости

CVSS3: 4.3
ubuntu
больше 3 лет назад

Insufficient policy enforcement in Extensions API in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to bypass downloads policy via a crafted HTML page.

CVSS3: 4.3
nvd
больше 3 лет назад

Insufficient policy enforcement in Extensions API in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to bypass downloads policy via a crafted HTML page.

msrc
больше 3 лет назад

Chromium: CVE-2022-1872 Insufficient policy enforcement in Extensions API

CVSS3: 4.3
debian
больше 3 лет назад

Insufficient policy enforcement in Extensions API in Google Chrome pri ...

CVSS3: 4.3
fstec
больше 3 лет назад

Уязвимость компонента Extensions API браузеров Google Chrome и Microsoft Edge, позволяющая нарушителю раскрыть защищаемую информацию

EPSS

Процентиль: 42%
0.00203
Низкий

4.3 Medium

CVSS3