Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-28466
HistoryApr 07, 2022 - 12:00 a.m.

Google Chrome File System API信息泄露漏洞

2022-04-0700:00:00
China National Vulnerability Database
www.cnvd.org.cn
5
google chrome
file system api
security vulnerability
information disclosure
environment variables
unauthorized attack

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Google Chrome, which is caused by the window.showSaveFilePicker function that parses and returns environment variable values to the user when passing environment variables, which can be exploited by an attacker to execute an information disclosure attack without authorization. An attacker could use this vulnerability to construct malicious data to execute an information disclosure attack and eventually disclose system environment variables without authorization.