Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-c8vp-x3mr-73x8

Опубликовано: 08 мар. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

Insufficient policy enforcement in Extensions API in Google Chrome prior to 111.0.5563.64 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension. (Chromium security severity: Medium)

Insufficient policy enforcement in Extensions API in Google Chrome prior to 111.0.5563.64 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension. (Chromium security severity: Medium)

EPSS

Процентиль: 2%
0.00014
Низкий

4.3 Medium

CVSS3

Связанные уязвимости

CVSS3: 4.3
ubuntu
почти 3 года назад

Insufficient policy enforcement in Extensions API in Google Chrome prior to 111.0.5563.64 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension. (Chromium security severity: Medium)

CVSS3: 4.3
nvd
почти 3 года назад

Insufficient policy enforcement in Extensions API in Google Chrome prior to 111.0.5563.64 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension. (Chromium security severity: Medium)

msrc
почти 3 года назад

Chromium: CVE-2023-1221 Insufficient policy enforcement in Extensions API

CVSS3: 4.3
debian
почти 3 года назад

Insufficient policy enforcement in Extensions API in Google Chrome pri ...

CVSS3: 4.3
fstec
почти 3 года назад

Уязвимость реализации прикладного программного интерфейса Extensions браузера Google Chrome, позволяющая нарушителю обойти ограничения безопасности

EPSS

Процентиль: 2%
0.00014
Низкий

4.3 Medium

CVSS3