Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2023-2459
HistoryMay 03, 2023 - 12:15 a.m.

CVE-2023-2459

2023-05-0300:15:08
Debian Security Bug Tracker
security-tracker.debian.org
28
cve-2023-2459
google chrome
prompts
inappropriate implementation
vulnerability
remote attacker
permission restrictions
crafted html page
chromium
security severity medium
unix

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

EPSS

0.005

Percentile

75.8%

Inappropriate implementation in Prompts in Google Chrome prior to 113.0.5672.63 allowed a remote attacker to bypass permission restrictions via a crafted HTML page. (Chromium security severity: Medium)

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

EPSS

0.005

Percentile

75.8%