CVE-2018-6037

Опубликовано: 24 янв. 2018

Источник: redhat

CVSS3: 6.5

EPSS Низкий

Описание

Inappropriate implementation in autofill in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to obtain autofill data with insufficient user gestures via a crafted HTML page.

Ссылки на источники

Дополнительная информация

Статус:

Moderate

https://bugzilla.redhat.com/show_bug.cgi?id=1538509chromium-browser: insufficient user gesture requirements in autofill

EPSS

Процентиль: 73%

0.01597

Низкий

6.5 Medium

CVSS3

Связанные уязвимости

CVE-2018-6037

CVSS3: 6.5

ubuntu

почти 8 лет назад

Inappropriate implementation in autofill in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to obtain autofill data with insufficient user gestures via a crafted HTML page.

CVE-2018-6037

CVSS3: 6.5

nvd

почти 8 лет назад

Inappropriate implementation in autofill in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to obtain autofill data with insufficient user gestures via a crafted HTML page.

CVE-2018-6037

CVSS3: 6.5

debian

почти 8 лет назад

Inappropriate implementation in autofill in Google Chrome prior to 64. ...

GHSA-xv76-pqh9-f864

CVSS3: 6.5

github

около 4 лет назад

Inappropriate implementation in autofill in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to obtain autofill data with insufficient user gestures via a crafted HTML page.

openSUSE-SU-2018:0259-1

suse-cvrf

больше 8 лет назад

Security update for chromium

EPSS

Процентиль: 73%

0.01597

Низкий

6.5 Medium

CVSS3