Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-gjqr-5qrf-53qf

Опубликовано: 31 мая 2023
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

Inappropriate implementation in Extensions API in Google Chrome prior to 114.0.5735.90 allowed an attacker who convinced a user to install a malicious extension to spoof the contents of the UI via a crafted Chrome Extension. (Chromium security severity: Low)

Inappropriate implementation in Extensions API in Google Chrome prior to 114.0.5735.90 allowed an attacker who convinced a user to install a malicious extension to spoof the contents of the UI via a crafted Chrome Extension. (Chromium security severity: Low)

EPSS

Процентиль: 24%
0.00083
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-451

Связанные уязвимости

CVSS3: 4.3
ubuntu
больше 2 лет назад

Inappropriate implementation in Extensions API in Google Chrome prior to 114.0.5735.90 allowed an attacker who convinced a user to install a malicious extension to spoof the contents of the UI via a crafted Chrome Extension. (Chromium security severity: Low)

CVSS3: 4.3
nvd
больше 2 лет назад

Inappropriate implementation in Extensions API in Google Chrome prior to 114.0.5735.90 allowed an attacker who convinced a user to install a malicious extension to spoof the contents of the UI via a crafted Chrome Extension. (Chromium security severity: Low)

msrc
больше 2 лет назад

Chromium: CVE-2023-2941 Inappropriate implementation in Extensions API

CVSS3: 4.3
debian
больше 2 лет назад

Inappropriate implementation in Extensions API in Google Chrome prior ...

CVSS3: 4.3
fstec
больше 2 лет назад

Уязвимость компонента Extensions API браузеров Google Chrome и Microsoft Edge, позволяющая нарушителю установить произвольное расширение

EPSS

Процентиль: 24%
0.00083
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-451