GHSA-jhfw-3fvm-pf8m

Опубликовано: 13 мая 2022

Источник: github

Github: Не прошло ревью

CVSS3: 8.8

Описание

Failure to disallow PWA installation from CSP sandboxed pages in AppManifest in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to access privileged APIs via a crafted HTML page.

Ссылки

EPSS

Процентиль: 73%

0.0155

Низкий

8.8 High

CVSS3

CVE ID

CVE-2018-6083

Связанные уязвимости

CVE-2018-6083

CVSS3: 8.8

ubuntu

почти 8 лет назад

Failure to disallow PWA installation from CSP sandboxed pages in AppManifest in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to access privileged APIs via a crafted HTML page.

CVE-2018-6083

CVSS3: 4.3

redhat

больше 8 лет назад

Failure to disallow PWA installation from CSP sandboxed pages in AppManifest in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to access privileged APIs via a crafted HTML page.

CVE-2018-6083

CVSS3: 8.8

nvd

почти 8 лет назад

Failure to disallow PWA installation from CSP sandboxed pages in AppManifest in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to access privileged APIs via a crafted HTML page.

CVE-2018-6083

CVSS3: 8.8

debian

почти 8 лет назад

Failure to disallow PWA installation from CSP sandboxed pages in AppMa ...

openSUSE-SU-2018:0704-1

suse-cvrf

больше 8 лет назад

Security update for Chromium

EPSS

Процентиль: 73%

0.0155

Низкий

8.8 High

CVSS3

CVE ID

CVE-2018-6083