Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-h5rc-j9f7-wmr8

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.4

Описание

Allowing the chrome.debugger API to run on file:// URLs in DevTools in Google Chrome prior to 69.0.3497.81 allowed an attacker who convinced a user to install a malicious extension to access files on the local file system without file access permission via a crafted Chrome Extension.

Allowing the chrome.debugger API to run on file:// URLs in DevTools in Google Chrome prior to 69.0.3497.81 allowed an attacker who convinced a user to install a malicious extension to access files on the local file system without file access permission via a crafted Chrome Extension.

EPSS

Процентиль: 42%
0.00205
Низкий

7.4 High

CVSS3

Дефекты

CWE-862

Связанные уязвимости

CVSS3: 7.4
ubuntu
около 7 лет назад

Allowing the chrome.debugger API to run on file:// URLs in DevTools in Google Chrome prior to 69.0.3497.81 allowed an attacker who convinced a user to install a malicious extension to access files on the local file system without file access permission via a crafted Chrome Extension.

CVSS3: 6.5
redhat
больше 7 лет назад

Allowing the chrome.debugger API to run on file:// URLs in DevTools in Google Chrome prior to 69.0.3497.81 allowed an attacker who convinced a user to install a malicious extension to access files on the local file system without file access permission via a crafted Chrome Extension.

CVSS3: 7.4
nvd
около 7 лет назад

Allowing the chrome.debugger API to run on file:// URLs in DevTools in Google Chrome prior to 69.0.3497.81 allowed an attacker who convinced a user to install a malicious extension to access files on the local file system without file access permission via a crafted Chrome Extension.

CVSS3: 7.4
debian
около 7 лет назад

Allowing the chrome.debugger API to run on file:// URLs in DevTools in ...

CVSS3: 7.4
fstec
больше 7 лет назад

Уязвимость набора инструментов DevTools браузера Google Chrome, позволяющая нарушителю получить несанкционированный доступ к локальным файлам

EPSS

Процентиль: 42%
0.00205
Низкий

7.4 High

CVSS3

Дефекты

CWE-862