Lucene search

K
cve[email protected]CVE-2024-3845
HistoryApr 17, 2024 - 8:15 a.m.

CVE-2024-3845

2024-04-1708:15:10
web.nvd.nist.gov
57
20
inappropriate implementation
networks
google chrome
mixed content policy
remote attacker
crafted html page
chromium
security severity
low

5.4 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

13.1%

Inappropriate implementation in Networks in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to bypass mixed content policy via a crafted HTML page. (Chromium security severity: Low)

Affected configurations

Vulners
Node
googlechromeRange<124.0.6367.60

CNA Affected

[
  {
    "vendor": "Google",
    "product": "Chrome",
    "versions": [
      {
        "version": "124.0.6367.60",
        "status": "affected",
        "lessThan": "124.0.6367.60",
        "versionType": "custom"
      }
    ]
  }
]

Social References

More