GoogleOSV:CVE-2022-3201CVE-2022-3201
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
8 High
AI Score
Confidence
High
0.005 Low
EPSS
Percentile
77.4%
Insufficient validation of untrusted input in DevTools in Google Chrome on Chrome OS prior to 105.0.5195.125 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: High)
References
chromereleases.googleblog.com/2022/09/stable-channel-update-for-desktop_14.html
crbug.com/1343104
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4NMJURTG5RO3TGD7ZMIQ6Z4ZZ3SAVYE/
security.gentoo.org/glsa/202209-23
security.gentoo.org/glsa/202210-16
security.gentoo.org/glsa/202311-11
www.debian.org/security/2022/dsa-5244
Related
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
8 High
AI Score
Confidence
High
0.005 Low
EPSS
Percentile
77.4%