Lucene search

K

Veracode Vulnerability DatabaseVERACODE:45632

HistoryFeb 26, 2024 - 8:25 a.m.

Bypassing Content Security Policy

2024-02-2608:25:23

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

15

content security policy

google chrome

site isolation

vulnerability

AI Score

6.3

Confidence

High

EPSS

0

Percentile

15.5%

Google Chrome is vulnerable to bypassing Content Security Policy. The vulnerability is due to inappropriate implementation in Site Isolation.

References

chromereleases.googleblog.com/2024/02/stable-channel-update-for-desktop_20.html

issues.chromium.org/issues/41487933

lists.fedoraproject.org/archives/list/[email protected]/message/PWWBMVQTSERVBXSXCZVUKIMEDNQUQ7O3/

lists.fedoraproject.org/archives/list/[email protected]/message/QDCMYQ3J45NHQ4EJREM3BJNNKB5BK4Y7/

security-tracker.debian.org/tracker/CVE-2024-1671

AI Score

6.3

Confidence

High

EPSS

0

Percentile

15.5%

Related for VERACODE:45632

alpinelinux1 vulnrichment1 osv4 cve1 nvd1 debiancve1 mscve1 ubuntucve1 prion1 cvelist1 openvas7 fedora2 nessus7 freebsd1 debian1 kaspersky2 chrome1 redos1