Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2018-18344

Опубликовано: 04 дек. 2018
Источник: redhat
CVSS3: 8.8

Описание

Inappropriate allowance of the setDownloadBehavior devtools protocol feature in Extensions in Google Chrome prior to 71.0.3578.80 allowed a remote attacker with control of an installed extension to access files on the local file system via a crafted Chrome Extension.

Дополнительная информация

Статус:

Important
https://bugzilla.redhat.com/show_bug.cgi?id=1656558chromium-browser: Inappropriate implementation in Extensions

8.8 High

CVSS3

Связанные уязвимости

CVSS3: 6.5
ubuntu
около 7 лет назад

Inappropriate allowance of the setDownloadBehavior devtools protocol feature in Extensions in Google Chrome prior to 71.0.3578.80 allowed a remote attacker with control of an installed extension to access files on the local file system via a crafted Chrome Extension.

CVSS3: 6.5
nvd
около 7 лет назад

Inappropriate allowance of the setDownloadBehavior devtools protocol feature in Extensions in Google Chrome prior to 71.0.3578.80 allowed a remote attacker with control of an installed extension to access files on the local file system via a crafted Chrome Extension.

CVSS3: 6.5
debian
около 7 лет назад

Inappropriate allowance of the setDownloadBehavior devtools protocol f ...

CVSS3: 6.5
github
больше 3 лет назад

Inappropriate allowance of the setDownloadBehavior devtools protocol feature in Extensions in Google Chrome prior to 71.0.3578.80 allowed a remote attacker with control of an installed extension to access files on the local file system via a crafted Chrome Extension.

CVSS3: 7.5
fstec
больше 7 лет назад

Уязвимость функции setDownloadBehavior веб-браузера Google Chrome, позволяющая нарушителю получить несанкционированный доступ к файлам в локальной файловой системе

8.8 High

CVSS3