CVE-2024-1671

2024-02-2103:14:42

Chrome

github.com

cve-2024-1671

content security policy

remote attacker

crafted html page

chrome

medium severity

inappropriate implementation

AI Score

5.9

Confidence

High

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

Inappropriate implementation in Site Isolation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Medium)

CNA Affected

[
  {
    "vendor": "Google",
    "product": "Chrome",
    "versions": [
      {
        "status": "affected",
        "version": "122.0.6261.57",
        "lessThan": "122.0.6261.57",
        "versionType": "custom"
      }
    ]
  }
]