Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:34960
HistoryApr 04, 2022 - 6:44 p.m.

Business Logic Flaws

2022-04-0418:44:45
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7

6.1 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

chromium is vulnerable to business logic flaws. The vulnerability exists due to inappropriate implementation in Virtual Keyboard which allows an attacker to perform unwanted actions.

6.1 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N