CVE-2018-6045

Опубликовано: 24 янв. 2018

Источник: redhat

CVSS3: 6.5

EPSS Низкий

Описание

Insufficient policy enforcement in DevTools in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak user local file data via a crafted Chrome Extension.

Ссылки на источники

Дополнительная информация

Статус:

Moderate

https://bugzilla.redhat.com/show_bug.cgi?id=1538516chromium-browser: insufficient isolation of devtools from extensions

EPSS

Процентиль: 76%

0.00936

Низкий

6.5 Medium

CVSS3

Связанные уязвимости

CVE-2018-6045

CVSS3: 6.5

ubuntu

больше 7 лет назад

Insufficient policy enforcement in DevTools in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak user local file data via a crafted Chrome Extension.

CVE-2018-6045

CVSS3: 6.5

nvd

больше 7 лет назад

Insufficient policy enforcement in DevTools in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak user local file data via a crafted Chrome Extension.

CVE-2018-6045

CVSS3: 6.5

debian

больше 7 лет назад

Insufficient policy enforcement in DevTools in Google Chrome prior to ...

GHSA-6wg2-rhf8-jx86

CVSS3: 6.5

github

больше 3 лет назад

Insufficient policy enforcement in DevTools in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak user local file data via a crafted Chrome Extension.

openSUSE-SU-2018:0259-1

suse-cvrf

около 8 лет назад

Security update for chromium

EPSS

Процентиль: 76%

0.00936

Низкий

6.5 Medium

CVSS3