Lucene search

K
osvGoogleOSV:CVE-2023-2459
HistoryMay 03, 2023 - 12:15 a.m.

CVE-2023-2459

2023-05-0300:15:08
Google
osv.dev
4
cve-2023-2459
google chrome
prompts
inappropriate implementation
bypass
permission restrictions
crafted html
remote attacker
vulnerability
chromium
medium severity

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

AI Score

5.2

Confidence

Low

EPSS

0.005

Percentile

75.8%

Inappropriate implementation in Prompts in Google Chrome prior to 113.0.5672.63 allowed a remote attacker to bypass permission restrictions via a crafted HTML page. (Chromium security severity: Medium)

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

AI Score

5.2

Confidence

Low

EPSS

0.005

Percentile

75.8%