Information Disclosure

2023-03-1813:46:37

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

google chrome

authentication bypass

resource timing

malicious extension

api

information disclosure

EPSS

0.001

Percentile

31.5%

JSON

Google Chrome is vulnerable to Authentication Bypass. The vulnerability exists due to the insufficient policy enforcement in Resource Timing, which allows an attacker to convince user to install a malicious extension to obtain potentially sensitive information from API via a crafted Chrome Extension.