CVE-2023-1823

2023-04-0421:39:35

Chrome

www.cve.org

inappropriate implementation

fedcm

google chrome

remote attacker

bypass navigation restrictions

crafted html page

chromium

low severity

AI Score

6.7

Confidence

High

EPSS

0.003

Percentile

71.0%

JSON

Inappropriate implementation in FedCM in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Low)

CNA Affected

[
  {
    "vendor": "Google",
    "product": "Chrome",
    "versions": [
      {
        "version": "112.0.5615.49",
        "status": "affected",
        "lessThan": "112.0.5615.49",
        "versionType": "custom"
      }
    ]
  }
]