Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qh64-624x-v9fv

Опубликовано: 30 нояб. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

Insufficient validation of untrusted input in Downloads in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install a malicious extension to bypass Downloads restrictions via a crafted HTML page. (Chromium security severity: Medium)

Insufficient validation of untrusted input in Downloads in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install a malicious extension to bypass Downloads restrictions via a crafted HTML page. (Chromium security severity: Medium)

EPSS

Процентиль: 12%
0.0004
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 4.3
ubuntu
около 3 лет назад

Insufficient validation of untrusted input in Downloads in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install a malicious extension to bypass Downloads restrictions via a crafted HTML page. (Chromium security severity: Medium)

CVSS3: 4.3
nvd
около 3 лет назад

Insufficient validation of untrusted input in Downloads in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install a malicious extension to bypass Downloads restrictions via a crafted HTML page. (Chromium security severity: Medium)

msrc
около 3 лет назад

Chromium: CVE-2022-4186 Insufficient validation of untrusted input in Downloads

CVSS3: 4.3
debian
около 3 лет назад

Insufficient validation of untrusted input in Downloads in Google Chro ...

CVSS3: 4.3
fstec
больше 3 лет назад

Уязвимость компонента Downloads браузеров Microsoft Edge и Google Chrome, позволяющая нарушителю оказать воздействие на целостность данных

EPSS

Процентиль: 12%
0.0004
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-20