CVE-2018-6083

Опубликовано: 06 мар. 2018

Источник: redhat

CVSS3: 4.3

Описание

Failure to disallow PWA installation from CSP sandboxed pages in AppManifest in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to access privileged APIs via a crafted HTML page.

Ссылки на источники

Дополнительная информация

Статус:

Low

https://bugzilla.redhat.com/show_bug.cgi?id=1552500chromium-browser: incorrect processing of appmanifests

4.3 Medium

CVSS3

Связанные уязвимости

CVE-2018-6083

CVSS3: 8.8

ubuntu

около 7 лет назад

Failure to disallow PWA installation from CSP sandboxed pages in AppManifest in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to access privileged APIs via a crafted HTML page.

CVE-2018-6083

CVSS3: 8.8

nvd

около 7 лет назад

Failure to disallow PWA installation from CSP sandboxed pages in AppManifest in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to access privileged APIs via a crafted HTML page.

CVE-2018-6083

CVSS3: 8.8

debian

около 7 лет назад

Failure to disallow PWA installation from CSP sandboxed pages in AppMa ...

GHSA-jhfw-3fvm-pf8m

CVSS3: 8.8

github

больше 3 лет назад

Failure to disallow PWA installation from CSP sandboxed pages in AppManifest in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to access privileged APIs via a crafted HTML page.

openSUSE-SU-2018:0704-1

suse-cvrf

почти 8 лет назад

Security update for Chromium

4.3 Medium

CVSS3