Design/Logic Flaw

2012-12-0406:05:00

PRIOn knowledge base

www.prio-n.com

6.8 Medium

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.002 Low

EPSS

Percentile

64.2%

JSON

Google Chrome before 23.0.1271.95 does not properly handle file paths, which has unspecified impact and attack vectors.

CPENameOperatorVersion
chromeeq23.0.1271.87
chromeeq23.0.1271.58
chromeeq23.0.1271.19
chromeeq23.0.1271.51
chromeeq23.0.1271.45
chromeeq23.0.1271.18
chromeeq23.0.1271.17
chromeeq23.0.1271.92
chromeeq23.0.1271.8
chromeeq23.0.1271.61

Name	Operator	Version
chrome	eq	23.0.1271.87
chrome	eq	23.0.1271.58
chrome	eq	23.0.1271.19
chrome	eq	23.0.1271.51
chrome	eq	23.0.1271.45
chrome	eq	23.0.1271.18
chrome	eq	23.0.1271.17
chrome	eq	23.0.1271.92
chrome	eq	23.0.1271.8
chrome	eq	23.0.1271.61