Lucene search

K
ubuntucveUbuntu.comUB:CVE-2023-4078
HistoryAug 03, 2023 - 12:00 a.m.

CVE-2023-4078

2023-08-0300:00:00
ubuntu.com
ubuntu.com
7
google chrome
extension
injection
malicious
cve-2023-4078
chromium
ubuntu 19.10

0.001 Low

EPSS

Percentile

34.5%

Inappropriate implementation in Extensions in Google Chrome prior to
115.0.5790.170 allowed an attacker who convinced a user to install a
malicious extension to inject scripts or HTML into a privileged page via a
crafted Chrome Extension. (Chromium security severity: Medium)

Notes

Author Note
alexmurray The Debian chromium source package is called chromium-browser in Ubuntu
mdeslaur starting with Ubuntu 19.10, the chromium-browser package is just a script that installs the Chromium snap