OPENSUSE-SU-2024:13317-1 chromedriver-118.0.5993.70-1.1 on GA media

These are all security issues fixed in the chromedriver-118.0.5993.70-1.1 package on the GA media of openSUSE Tumbleweed...

Security Bulletin: IBM Event Streams is affected by a vulnerability in Node.js ChromeDriver module (CVE-2023-26156)

Summary This security vulnerability affects a required node.js module within IBM Event Streams UI component. Vulnerability Details CVEID: CVE-2023-26156 DESCRIPTION: Node.js ChromeDriver module could allow a remote attacker to execute arbitrary commands on the system, caused by a command injectio...

The vulnerability of the chromedriver software for automated testing of web applications stems from the lack of measures taken to neutralize special elements used in the operating system command line. This vulnerability allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the chromedriver software for automated testing of web applications exists due to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protecte...

Command Injection

chromedriver is vulnerable to Command Injection. This vulnerability allows an attacker to execute arbitrary commands on the host system by setting the chromedriver.path to an arbitrary system binary. The attacker could exploit this vulnerability by tricking a user into running a specially crafted...

@faltest/remote (12.0.6) potentially affected by CVE-2023-26156 via chromedriver (119.0.0)

chromedriver NPM version 119.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on chromedriver and may be impacted: - @faltest/remote 12.0.6 Source cves: CVE-2023-26156 Source advisory: OSV:GHSA-HM92-VGMW-QFMX...

GHSA-HM92-VGMW-QFMX chromedriver Command Injection vulnerability

Versions of the package chromedriver before 119.0.1 are vulnerable to Command Injection when setting the chromedriver.path to an arbitrary system binary. This could lead to unauthorized access and potentially malicious actions on the host system. Note: An attacker must have access to the system...

chromedriver Command Injection vulnerability

Versions of the package chromedriver before 119.0.1 are vulnerable to Command Injection when setting the chromedriver.path to an arbitrary system binary. This could lead to unauthorized access and potentially malicious actions on the host system. Note: An attacker must have access to the system...

CVE-2023-26156

Versions of the package chromedriver before 119.0.1 are vulnerable to Command Injection when setting the chromedriver.path to an arbitrary system binary. This could lead to unauthorized access and potentially malicious actions on the host system. Note: An attacker must have access to the system...

Command injection

Versions of the package chromedriver before 119.0.1 are vulnerable to Command Injection when setting the chromedriver.path to an arbitrary system binary. This could lead to unauthorized access and potentially malicious actions on the host system. Note: An attacker must have access to the system...

CVE-2023-26156

Versions of the package chromedriver before 119.0.1 are vulnerable to Command Injection when setting the chromedriver.path to an arbitrary system binary. This could lead to unauthorized access and potentially malicious actions on the host system. Note: An attacker must have access to the system...

CVE-2023-26156

Versions of the package chromedriver before 119.0.1 are vulnerable to Command Injection when setting the chromedriver.path to an arbitrary system binary. This could lead to unauthorized access and potentially malicious actions on the host system. Note: An attacker must have access to the system...

CVE-2023-26156

Versions of the package chromedriver before 119.0.1 are vulnerable to Command Injection when setting the chromedriver.path to an arbitrary system binary. This could lead to unauthorized access and potentially malicious actions on the host system. Note: An attacker must have access to the system...

CVE-2023-26156

CVE-2023-26156 affects chromedriver prior to 119.0.1. The vulnerability arises when chromedriver.path is set to an arbitrary system binary, enabling command injection that could lead to unauthorized access and potentially malicious actions on the host. An attacker must have access to the system r...

chromedriver security vulnerability

ChromeDriver is a driver by Giovanni Bassi Personal Developer. A security vulnerability exists in chromedriver versions prior to 119.0.1, which stems from vulnerability to command injection attacks...

PT-2023-7019 · Google +1 · Chromedriver +1

Name of the Vulnerable Software and Affected Versions: chromedriver versions prior to 119.0.1 Description: The issue arises from a Command Injection vulnerability when setting the chromedriver.path to an arbitrary system binary. This could lead to unauthorized access and potentially malicious...

Command Injection

Overview chromedriver is a ChromeDriver for Selenium Affected versions of this package are vulnerable to Command Injection when setting the chromedriver.path to an arbitrary system binary. This could lead to unauthorized access and potentially malicious actions on the host system. Note: An attack...

@faltest/remote (12.0.6) potentially affected by CVE-2023-26156 via chromedriver (119.0.0)

chromedriver NPM version 119.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on chromedriver and may be impacted: - @faltest/remote 12.0.6 Source cves: CVE-2023-26156 Source advisory: SNYK:JS-CHROMEDRIVER-6049539...

Exploit for Path Traversal in Fit2Cloud Jumpserver

CVE-2023-42819 CVE-2023-42819 Description of the Vulne...

SUSE CVE-2020-6484

Insufficient data validation in ChromeDriver in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictions via a crafted request...

openSUSE 15 Security Update : chromium (openSUSE-SU-2023:0032-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2023:0032-1 advisory. - Use after free in WebTransport. CVE-2023-0471 - Use after free in WebRTC. CVE-2023-0472 - Type Confusion in ServiceWorker API. CVE-2023-0473 -...