Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8qp3-mmfx-p4h5

Опубликовано: 28 июл. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

Insufficient policy enforcement in Extensions API in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to bypass downloads policy via a crafted HTML page.

Insufficient policy enforcement in Extensions API in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to bypass downloads policy via a crafted HTML page.

EPSS

Процентиль: 43%
0.00547
Низкий

4.3 Medium

CVSS3

Связанные уязвимости

CVSS3: 4.3
ubuntu
около 4 лет назад

Insufficient policy enforcement in Extensions API in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to bypass downloads policy via a crafted HTML page.

CVSS3: 4.3
nvd
около 4 лет назад

Insufficient policy enforcement in Extensions API in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to bypass downloads policy via a crafted HTML page.

msrc
около 4 лет назад

Chromium: CVE-2022-1872 Insufficient policy enforcement in Extensions API

CVSS3: 4.3
debian
около 4 лет назад

Insufficient policy enforcement in Extensions API in Google Chrome pri ...

CVSS3: 4.3
fstec
около 4 лет назад

Уязвимость компонента Extensions API браузеров Google Chrome и Microsoft Edge, позволяющая нарушителю раскрыть защищаемую информацию

EPSS

Процентиль: 43%
0.00547
Низкий

4.3 Medium

CVSS3