Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:42504
HistoryAug 06, 2023 - 11:23 p.m.

Access Restriction Bypass

2023-08-0623:23:53
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
chromium
access restriction bypass
vulnerability
extensions
google chrome
remote attacker
renderer process
spoof
crafted html page
software

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

0.001 Low

EPSS

Percentile

41.9%

chromium is vulnerable to Access Restriction Bypass. The vulnerability exists due to inappropriate implementation in Extensions in Google Chrome which allows a remote attacker who had compromised the renderer process to spoof extension storage via a crafted HTML page.

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

0.001 Low

EPSS

Percentile

41.9%