Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2023-4361
HistoryAug 15, 2023 - 6:15 p.m.

CVE-2023-4361

2023-08-1518:15:12
Debian Security Bug Tracker
security-tracker.debian.org
20
cve-2023-4361
inappropriate implementation
google chrome
autofill
android
remote attacker
bypass
restrictions
crafted html page
chromium
security severity
medium
unix

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

EPSS

0.003

Percentile

68.2%

Inappropriate implementation in Autofill in Google Chrome on Android prior to 116.0.5845.96 allowed a remote attacker to bypass Autofill restrictions via a crafted HTML page. (Chromium security severity: Medium)

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

EPSS

0.003

Percentile

68.2%