Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:28119
HistoryDec 06, 2020 - 3:06 a.m.

Authorization Bypass

2020-12-0603:06:15
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
chromium
authorization bypass
extension permissions
special schemes
host vulnerability

EPSS

0.005

Percentile

75.9%

chromium is vulnerable to authorization bypass. A missing case for handling special schemes in permission request checks in Extensions allows an attacker to install a malicious extension on a victim’s host to bypass extension permission checks for privileged pages via a malicious Chrome Extension.