OPENSUSE-SU-2024:12867-1 chromedriver-112.0.5615.121-1.1 on GA media

These are all security issues fixed in the chromedriver-112.0.5615.121-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13229-1 chromedriver-116.0.5845.187-1.1 on GA media

These are all security issues fixed in the chromedriver-116.0.5845.187-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12333-1 chromedriver-105.0.5195.127-1.1 on GA media

These are all security issues fixed in the chromedriver-105.0.5195.127-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12978-1 chromedriver-114.0.5735.90-1.1 on GA media

These are all security issues fixed in the chromedriver-114.0.5735.90-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13368-1 chromedriver-118.0.5993.117-1.1 on GA media

These are all security issues fixed in the chromedriver-118.0.5993.117-1.1 package on the GA media of openSUSE Tumbleweed...

Security Bulletin: IBM Event Streams is affected by a vulnerability in Node.js ChromeDriver module (CVE-2023-26156)

Summary This security vulnerability affects a required node.js module within IBM Event Streams UI component. Vulnerability Details CVEID: CVE-2023-26156 DESCRIPTION: Node.js ChromeDriver module could allow a remote attacker to execute arbitrary commands on the system, caused by a command injectio...

The vulnerability of the chromedriver software for automated testing of web applications stems from the lack of measures taken to neutralize special elements used in the operating system command line. This vulnerability allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the chromedriver software for automated testing of web applications exists due to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protecte...

Command Injection

chromedriver is vulnerable to Command Injection. This vulnerability allows an attacker to execute arbitrary commands on the host system by setting the chromedriver.path to an arbitrary system binary. The attacker could exploit this vulnerability by tricking a user into running a specially crafted...

@amjs/vue-tools (>=2.0.5 <=2.0.6), @axe-core/cli (>=4.3.3 <=4.7.4-alpha.409) +68 more potentially affected by CVE-2023-26156 via chromedriver (>=100.0.0 <=119.0.0)

chromedriver NPM version =100.0.0, =2.0.5, =4.3.3, =0.1.0, =3.5.0-beta.1, =0.0.91, =0.1.1-alpha5, =7.4.0, =1.16.0, =1.0.1, =4.0.0, =6.0.0, =6.0.22, =0.21.1, =1.0.0-feat.12 and more Source cves: CVE-2023-26156 Source advisory: OSV:GHSA-HM92-VGMW-QFMX...

chromedriver Command Injection vulnerability

Versions of the package chromedriver before 119.0.1 are vulnerable to Command Injection when setting the chromedriver.path to an arbitrary system binary. This could lead to unauthorized access and potentially malicious actions on the host system. Note: An attacker must have access to the system...

GHSA-HM92-VGMW-QFMX chromedriver Command Injection vulnerability

Versions of the package chromedriver before 119.0.1 are vulnerable to Command Injection when setting the chromedriver.path to an arbitrary system binary. This could lead to unauthorized access and potentially malicious actions on the host system. Note: An attacker must have access to the system...

CVE-2023-26156

Versions of the package chromedriver before 119.0.1 are vulnerable to Command Injection when setting the chromedriver.path to an arbitrary system binary. This could lead to unauthorized access and potentially malicious actions on the host system. Note: An attacker must have access to the system...

Command injection

Versions of the package chromedriver before 119.0.1 are vulnerable to Command Injection when setting the chromedriver.path to an arbitrary system binary. This could lead to unauthorized access and potentially malicious actions on the host system. Note: An attacker must have access to the system...

CVE-2023-26156

Versions of the package chromedriver before 119.0.1 are vulnerable to Command Injection when setting the chromedriver.path to an arbitrary system binary. This could lead to unauthorized access and potentially malicious actions on the host system. Note: An attacker must have access to the system...

CVE-2023-26156

CVE-2023-26156 affects chromedriver prior to 119.0.1. The vulnerability arises when chromedriver.path is set to an arbitrary system binary, enabling command injection that could lead to unauthorized access and potentially malicious actions on the host. An attacker must have access to the system r...

CVE-2023-26156

Versions of the package chromedriver before 119.0.1 are vulnerable to Command Injection when setting the chromedriver.path to an arbitrary system binary. This could lead to unauthorized access and potentially malicious actions on the host system. Note: An attacker must have access to the system...

CVE-2023-26156

Versions of the package chromedriver before 119.0.1 are vulnerable to Command Injection when setting the chromedriver.path to an arbitrary system binary. This could lead to unauthorized access and potentially malicious actions on the host system. Note: An attacker must have access to the system...

chromedriver security vulnerability

ChromeDriver is a driver by Giovanni Bassi Personal Developer. A security vulnerability exists in chromedriver versions prior to 119.0.1, which stems from vulnerability to command injection attacks...

PT-2023-7019 · Google +1 · Chromedriver +1

Name of the Vulnerable Software and Affected Versions: chromedriver versions prior to 119.0.1 Description: The issue arises from a Command Injection vulnerability when setting the chromedriver.path to an arbitrary system binary. This could lead to unauthorized access and potentially malicious...

Command Injection

Overview chromedriver is a ChromeDriver for Selenium Affected versions of this package are vulnerable to Command Injection when setting the chromedriver.path to an arbitrary system binary. This could lead to unauthorized access and potentially malicious actions on the host system. Note: An attack...