Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:42558
HistoryAug 07, 2023 - 1:17 a.m.

Authorization Bypass

2023-08-0701:17:57
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
chromium
authorization bypass
extension api
vulnerability
malicious extension
ui spoofing

0.001 Low

EPSS

Percentile

31.6%

chromium is vulnerable to Authorization Bypasses. Inappropriate implementation in Extensions API allows an attacker who convinces a user to install a malicious extension to spoof the contents of the UI via a crafted Chrome Extension.