Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mmq8-6g35-x65g

Опубликовано: 30 нояб. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

Insufficient policy enforcement in DevTools in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension. (Chromium security severity: Medium)

Insufficient policy enforcement in DevTools in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension. (Chromium security severity: Medium)

EPSS

Процентиль: 12%
0.0004
Низкий

4.3 Medium

CVSS3

Связанные уязвимости

CVSS3: 4.3
ubuntu
около 3 лет назад

Insufficient policy enforcement in DevTools in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension. (Chromium security severity: Medium)

CVSS3: 4.3
nvd
около 3 лет назад

Insufficient policy enforcement in DevTools in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension. (Chromium security severity: Medium)

msrc
около 3 лет назад

Chromium: CVE-2022-4189 Insufficient policy enforcement in DevTools

CVSS3: 4.3
debian
около 3 лет назад

Insufficient policy enforcement in DevTools in Google Chrome prior to ...

CVSS3: 4.3
fstec
больше 3 лет назад

Уязвимость набора инструментов для веб-разработки DevTools браузеров Microsoft Edge и Google Chrome, позволяющая нарушителю оказать воздействие на целостность данных

EPSS

Процентиль: 12%
0.0004
Низкий

4.3 Medium

CVSS3