Описание
Insufficient policy enforcement in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)
A flaw was found in Google Chrome's WebXR component. This vulnerability, caused by insufficient policy enforcement, could allow a remote attacker to bypass the same-origin policy. By crafting a malicious HTML page, an attacker could exploit this to gain unauthorized access to sensitive information or actions across different web origins.
Отчет
This vulnerability in the WebXR component of chromium-browser is rated as Important. A remote attacker could exploit insufficient policy enforcement to bypass the same-origin policy through a crafted HTML page, potentially leading to unauthorized access to sensitive information. User interaction, such as visiting a malicious website, is required for exploitation.
Дополнительная информация
Статус:
EPSS
7.1 High
CVSS3
Связанные уязвимости
Insufficient policy enforcement in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)
Insufficient policy enforcement in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)
Insufficient policy enforcement in WebXR in Google Chrome prior to 151 ...
Insufficient policy enforcement in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)
EPSS
7.1 High
CVSS3