Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-65156
HistoryAug 17, 2023 - 12:00 a.m.

Milesight UR32L ys_thirdparty check_system_user function command injection vulnerability

2023-08-1700:00:00
China National Vulnerability Database
www.cnvd.org.cn
3
milesight
ur32l
ys_thirdparty
command injection
vulnerability
google chrome
web browser
data forgery issue
insufficient data validation
systems extensions
remote attacker
file restrictions
html page
malicious extension
cnvd

0.001 Low

EPSS

Percentile

26.2%

Google Chrome is a web browser from Google, an American company. A data forgery issue vulnerability exists in Google Chrome prior to version 116.0.5845.96, which stems from insufficient data validation of Systems Extensions, and can be exploited by a remote attacker to bypass file restrictions via a crafted HTML page and trick users into installing a malicious extension.

CPENameOperatorVersion
google chrome <116.eq0.5845.96

0.001 Low

EPSS

Percentile

26.2%

Related for CNVD-2023-65156